Explaining Conditional Access

Azure AD Conditional Access is a feature within Azure AD Premium P1 and P2 and Microsoft 365 Business Premium. It is designed to provide a balance between security and productivity in modern workplace environments amidst employees’ increasing need to work from anywhere and on any device. Conditional Access enables Microsoft 365 administrators to control requests from devices and apps to access company resources.

This is achieved with granular access control policies that are used to define and apply conditions that determine whether access is granted or denied. The following are some examples of categories based on which conditions can be triggered:

• Location
• Device type
• Device state
• User state
• Application sensitivity

So, how does this work? The most basic description of a Conditional Access policy is when this happens > do this.

This combination of the condition with the access control makes up the Conditional...