Continuous Access Evaluation

A Microsoft Entra mechanism that lets supported services act on security events while an access token is still valid, allowing longer-lived tokens that can be revoked in near real time. Clients declare the cp1 capability to signal they can handle its claims challenges.