Microsoft's Conditional Access enforcement change takes effect March 27, 2026. Learn how low-privilege OAuth scope exemptions created a security gap, how to detect affected applications using Sentinel KQL and Splunk SPL queries, and how to prioritise remediation before ROPC flows start failing in your tenant.