Microsoft Entra Conditional Access Client App Grant retirement date on 30 June 2026.You're receiving this notification because you are associated with one or more Azure subscriptions that use Microsoft Entra. As previously communicated in an email sent in March 2025, the Microsoft Client App Grant is retiring. On 30 June 2026, the Conditional Access "Require approved client app" control in Entra and any Conditional Access policies that include the approved client app grant control will move to a read-only state. Admins will no longer be able to create new policies or edit existing ones that use this control. Existing policies can still be disabled or deleted. Existing policies will continue to be enforced for end users as long as they remain enabled. We encourage you to make the switch sooner to gain the benefits of the "Require application protection policy" control, which provides the same data loss protection with additional benefits. Required action To avoid any disruptions in service as the policy will no longer be able to be modified, transition to using the "Require app protection policy" control in Entra before 30 June 2026. Help and support If you have a support plan and you need technical help, create a support request. If you need technical help with App Protection Policies, create a ticket with Intune. If you need technical help with Conditional Access, use the following: - For Issue type, select Technical.
- For Subscription, select your subscription.
- For Service type, select Microsoft Entra Sign-in and Multifactor Authentication.
- For Summary, type a description of your issue.
- For Problem type, select Conditional Access.
- For Problem subtype, select Troubleshoot Device State.
Learn more about service retirements that may impact your resources in the Azure Retirement Workbook. Please note that retirements may not be visible in the workbook for up to two weeks after being announced. | 
