Entra ID enforces conditional access for applications using baseline scopes

Microsoft is updating Entra ID to ensure conditional access policies are enforced for applications requesting only baseline scopes. These baseline scopes include standard OpenID Connect permissions like email and profile, as well as basic directory read permissions. Previously, applications using only these low-risk scopes could bypass policies...

Read the full article at the source.