Azure Active Directory Conditional Access

Entra ID – You can now list and recover deleted conditional access policies (updated)

Leave a Comment / Azure Active Directory, Microsoft Entra / / / , , , , , , , , ,

NOTE this post was originally posted in October 2nd and has now been updated with instructions from the Entra ID portal As you know, Entra ID Conditional Access policies play an important role in securing to your resources integrated with Entra ID for authentication (such as M365, Azure or third-party cloud apps). If you have […]

Entra ID – You can now list and recover deleted conditional access policies (updated) Read More »

Entra ID – Known issue (but undocumented) with conditional access

1 Comment / Azure Active Directory, Microsoft Entra / / / , , , , , , , , ,

Now I got your attention, this sounds alarming but in fact it is not and you will see below. As you know Entra ID Conditional Access policies allow you to protect access to your resources linked with Microsoft authentication platform (Entra ID). Well, let dig into the issue. First a bit of context. Requirements Block

Entra ID – Known issue (but undocumented) with conditional access Read More »

Entra ID – Get conditional access policy impact

Leave a Comment / Azure Active Directory, Microsoft Entra / / / , , , , , ,

As you Entra ID allows you to protect and enforce access policies when users are accessing resources using Conditional Access (CA) policies. Conditional Access policies can have 3 state: Off: meaning the policy is not being applied On: meaning the policy is going to be applied depending of the targeted users/groups/admin roles, applications…. Report: meaning

Entra ID – Get conditional access policy impact Read More »

Entra ID – New name and options for Conditional Access Location setting

Leave a Comment / Azure Active Directory, Microsoft Entra / / / , , , , , , , ,

As this is something you may not review and check frequently, you need to know there have been few changes related to the Location setting in Entra ID Conditional Access. The first one, quite minor if you think about it, is the Location setting has been renamed to Network. The second change is an additional

Entra ID – New name and options for Conditional Access Location setting Read More »

Entra ID – You can now have a better change tracking experience for Conditional Access policies (preview)

Leave a Comment / Azure Active Directory, Beta / Preview, Microsoft Entra / / / , , , , , , , ,

As you probably already know, you can track activities on Entra ID, from authentication to configuration changes. For some of these changes – such as conditional access policy updates – you can also get the old and new value in JSON format. As reading a JSON formatted information is not always easy, especially to identify

Entra ID – You can now have a better change tracking experience for Conditional Access policies (preview) Read More »

Intune – Remote Help now supports Azure AD Conditional Access

Leave a Comment / Endpoint Configuration Manager, Microsoft Intune / / / , , , , , , ,

If you are using Intune with either Intune Suite or Remote Help add-on, you will be glad to know that Remote Help is now supporting Azure AD Conditional Access. This means administrators can now setup a conditional access for Remote Help to enforce security (such as requesting MFA) and/or compliance when a Remote Help session

Intune – Remote Help now supports Azure AD Conditional Access Read More »

Azure AD – Update your Conditional Access policies if you are using ‘require approved client app’ before March 2026

Leave a Comment / Azure Active Directory, Microsoft Entra, Security / / / , , , , , ,

If you are using the grant control ‘Require approved client app’ in your Conditional Access policies, you need to update and migrate to use the grant control ‘Require application protection policy’ before March 2026. At this date, the control ‘Require approved client app’ will no longer be enforced and will act as if it was

Azure AD – Update your Conditional Access policies if you are using ‘require approved client app’ before March 2026 Read More »

Azure AD – You can use conditional access for PIM (preview)

Leave a Comment / Azure Active Directory, Beta / Preview, Microsoft Entra / / / , , , , , , , ,

As you know with Azure AD (P1 or P2) you can protect access to your workloads using Conditional Access. Well, you can now also use Conditional Access when used with PIM (Privileged Identity Management) (in preview), or more specifically when protected actions are being used. The below protected actions are currently supported: Update basic properties

Azure AD – You can use conditional access for PIM (preview) Read More »

Azure AD – You can now use Token Protection with Conditional Access (preview)

2 Comments / Azure Active Directory, Beta / Preview / / / , , , , , ,

You know that you can use Azure AD Conditional Access to secure access to your resource by enforcing MFA, device compliance… Well, Azure AD Conditional Access has been updated to allow you use Token Protection. Token Protection attempts to reduce attacks using token theft by ensuring a token is usable only from the intended device.

Azure AD – You can now use Token Protection with Conditional Access (preview) Read More »

Azure AD – You can now use app filtering when configuring conditional access (preview)

Leave a Comment / Azure Active Directory, Beta / Preview, Microsoft Entra / / / , , , , , , , ,

As you know, Azure AD (P1 license minimum) allows you to set up conditional access to secure access to your applications and your workloads identities. Well, when it comes to selecting the applications/workloads to include in the condition you have the choice to apply to all cloud application or explicitly selected ones. The later obviously

Azure AD – You can now use app filtering when configuring conditional access (preview) Read More »