Now I got your attention, this sounds alarming but in fact it is not and you will see below. As you know Entra ID Conditional Access policies allow you to protect access to your resources linked with Microsoft authentication platform (Entra ID). Well, let dig into the issue. First a bit of context. Requirements Block […]
Entra ID – Known issue (but undocumented) with conditional access Read More »
As you Entra ID allows you to protect and enforce access policies when users are accessing resources using Conditional Access (CA) policies. Conditional Access policies can have 3 state: Off: meaning the policy is not being applied On: meaning the policy is going to be applied depending of the targeted users/groups/admin roles, applications…. Report: meaning
Entra ID – Get conditional access policy impact Read More »
As this is something you may not review and check frequently, you need to know there have been few changes related to the Location setting in Entra ID Conditional Access. The first one, quite minor if you think about it, is the Location setting has been renamed to Network. The second change is an additional
Entra ID – New name and options for Conditional Access Location setting Read More »
As you probably already know, you can track activities on Entra ID, from authentication to configuration changes. For some of these changes – such as conditional access policy updates – you can also get the old and new value in JSON format. As reading a JSON formatted information is not always easy, especially to identify
If you are using Intune with either Intune Suite or Remote Help add-on, you will be glad to know that Remote Help is now supporting Azure AD Conditional Access. This means administrators can now setup a conditional access for Remote Help to enforce security (such as requesting MFA) and/or compliance when a Remote Help session
Intune – Remote Help now supports Azure AD Conditional Access Read More »
If you are using the grant control ‘Require approved client app’ in your Conditional Access policies, you need to update and migrate to use the grant control ‘Require application protection policy’ before March 2026. At this date, the control ‘Require approved client app’ will no longer be enforced and will act as if it was
As you know with Azure AD (P1 or P2) you can protect access to your workloads using Conditional Access. Well, you can now also use Conditional Access when used with PIM (Privileged Identity Management) (in preview), or more specifically when protected actions are being used. The below protected actions are currently supported: Update basic properties
Azure AD – You can use conditional access for PIM (preview) Read More »
You know that you can use Azure AD Conditional Access to secure access to your resource by enforcing MFA, device compliance… Well, Azure AD Conditional Access has been updated to allow you use Token Protection. Token Protection attempts to reduce attacks using token theft by ensuring a token is usable only from the intended device.
Azure AD – You can now use Token Protection with Conditional Access (preview) Read More »
As you know, Azure AD (P1 license minimum) allows you to set up conditional access to secure access to your applications and your workloads identities. Well, when it comes to selecting the applications/workloads to include in the condition you have the choice to apply to all cloud application or explicitly selected ones. The later obviously
Azure AD – You can now use app filtering when configuring conditional access (preview) Read More »
Azure AD comes with a lot of security features – some recent such as Passwordless authentication, some less recent such as conditional access – helping protecting your identities and workloads access. Well, in the never ending journey to keep secure identities and data, the Conditional Access feature has been updated to allow administrators to request
Azure AD – You can now define the multifactor authentication strength (preview) Read More »
