Tuesday, 10 November 2026

Conditional Access Policy Plans now document 100-rule and 100-plan limits

The period’s clearest administrator-facing update is new capacity guidance for Conditional Access Policy Plans. Other changes refine Global Secure Access connector release-note coverage and clarify SAP-related terminology, guidance, and links without indicating a broader product rollout.

• Entra ID · Conditional Access

  Conditional Access Policy Plans gain explicit capacity limits

  The guidance now states that each plan supports up to 100 rules and each tenant supports up to 100 plans. It also streamlines guidance for Global Secure Access and agent access scenarios.

• Global Secure Access · General

  Private network connector release notes expand operational coverage

  The release notes now document 24-hour CPU and memory history, improved health reporting, interface-specific DNS support, trace rotation, expanded event-log capacity, better error messages, TCP keepalive, memory management, and local log and file security.

• ID Governance · Standards

  SAP guidance links Joule identity and access instructions

  The SAP documentation now notes that Joule, SAP’s AI assistant, works across connected SAP applications and links to SAP guidance for enabling it in Cloud Identity Services.

• Entra ID · Provisioning

  SAP provisioning guidance standardizes agent terminology

  The planning guidance now explicitly identifies the associated Microsoft Entra agents as Microsoft Entra provisioning agents, making the terminology used in the source-and-target workflow clearer.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.