All free toolsFree tool · Conditional Access
Which apps did Microsoft’s Conditional Access change affect?
Since 13 May 2026, Conditional Access policies that cover all resources with exclusions also apply to apps that request only basic sign-in scopes. Find those apps and see which ones still sign in without MFA.
- Conditional Access Affected Apps Check
- Output: Excel report
- Free, no trial or account needed
Check your inbox
The link is on its way
We sent the download link to . It works for 7 days. Can’t find it? Check your junk folder.
While you wait: see Griffin31What it finds
- Every app that requests only basic sign-in or directory scopes
- MFA versus single-factor sign-ins per app, from your sign-in logs
- A High, Medium or Low risk rating per app
- Your own apps and third-party apps on separate sheets
Why it matters
Apps that used to slip past Conditional Access are now challenged. Apps that can’t handle MFA or device checks may fail for your users.
How it works
- 01Get the toolLeave your details and we email you the download link. Review the script before you run it.
- 02Run itOpen PowerShell 7 and run ca-affected-apps.ps1. Sign in with an admin account when asked.
- 03Open the reportAn Excel workbook with a summary sheet and every affected app, sorted by risk.
- 04Fix what mattersStart with the highest-risk items. Need help? Book a call with our team.
Requirements
- PowerShell 7 (Windows or macOS)
- Microsoft Graph and ImportExcel modules (install automatically)
- Read permissions: DelegatedPermissionGrant.Read.All, Directory.Read.All, Reports.Read.All, AuditLog.Read.All
What it can touch
Read-only. It reads permission grants and sign-in logs and changes nothing.
Griffin31
This tool checks one area. Griffin31 checks your whole tenant.
More than 370 Microsoft 365 security settings, the evidence behind every result, what to fix first, and an email when a setting slips back.
More free tools
Conditional AccessConditional Access Policy AnalyzerScore your Conditional Access policies and find the gaps attackers use.IdentityEntra App Registration AuditFind risky app permissions, expiring credentials and unused apps.Data and collaborationSharePoint Sites AuditFind the sites, OneDrives and Teams shared too widely.