Using conditional access

In our first conditional access scenario, we will use the Azure AD functionality to secure Salesforce access with Azure MFA:

1. Navigate to https://portal.azure.com and the Azure AD pane | Conditional Access.
2. Click New policy:

Creating a Conditional Access policy

3. Call the new policy Salesforce Protection.

4. Under assignments, go to Include | All users:

User assignment options

5. Under Cloud apps | Select apps, choose Salesforce:

Selecting the Salesforce app

6. Under Conditions | choose Locations | Yes and Any location:

Choosing the location attributes

Note

As you can see, you have many conditions that can be set when you want to fulfill security requirements in the case of additional authentication or access control mechanisms. You can find more information at the following source: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/.

7. Under Access controls, go to Grant.

8. Choose Grant access | Require multi-factor authentication:

Using MFA for granting the access

9. Enable...