{"id":38471,"date":"2023-05-31T11:50:00","date_gmt":"2023-05-31T11:50:00","guid":{"rendered":"https:\/\/infrasos.com\/?p=38471"},"modified":"2023-08-30T08:57:06","modified_gmt":"2023-08-30T08:57:06","slug":"azure-ad-conditional-access-implement-access-policies-controls","status":"publish","type":"post","link":"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/","title":{"rendered":"Azure AD Conditional Access: Implement Access Policies &#038; Controls"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"38471\" class=\"elementor elementor-38471\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-222b77a ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"222b77a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-418584c ot-flex-column-vertical\" data-id=\"418584c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2392de9 elementor-widget elementor-widget-text-editor\" data-id=\"2392de9\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>Azure AD Conditional Access: Implement Access Policies &amp; Controls. Are you familiar with Azure AD Conditional <a href=\"https:\/\/infrasos.com\/using-conditional-access-policies-to-enhance-office-365-security\/\">Access<\/a> and interested in learning how to implement it? Please read on.<\/p><p>First, we explain the meaning of Azure AD Conditional Access. This gives you a clear understanding of the concept. Next, we discuss the specific roles and subscriptions required to access this Azure Active Directory security feature.<\/p><p>Then, we emphasize why many organizations choose to use Conditional Access. Finally, we provide step-by-step instructions for implementing Conditional Access.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c701b55 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c701b55\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-26f737c ot-flex-column-vertical\" data-id=\"26f737c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-af1a525 elementor-widget elementor-widget-text-editor\" data-id=\"af1a525\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/using-conditional-access-policies-to-enhance-office-365-security\/\">Using Conditional Access Policies to Enhance Office 365 Security<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-43afd43 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"43afd43\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e9c0ea3 ot-flex-column-vertical\" data-id=\"e9c0ea3\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1f9707f elementor-widget elementor-widget-heading\" data-id=\"1f9707f\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-large\">What is Azure Active Directory Conditional Access?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-00ce272 elementor-widget elementor-widget-text-editor\" data-id=\"00ce272\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Microsoft describes conditional access using 3 words: <strong>signals<\/strong>, <strong>decisions<\/strong>, and <strong>policies<\/strong>. Organizations consider <strong>signals<\/strong> to make <strong>decisions<\/strong> that drive access <strong>policies<\/strong>.<\/p><p>Decisions encompass actions such as blocking access, <a href=\"https:\/\/infrasos.com\/how-to-implement-role-based-access-control-in-office-365\/\">allowing access<\/a>, or requiring additional authentication conditions. Policies enforce the signals and decisions.<\/p><p>So, <a href=\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/\">Azure AD<\/a> Access Control policy utilizes signals to make decisions while enforcing an organization&#8217;s policy.<\/p><p>Access Control policy at its core is an &#8220;if-then&#8221; statement. It evaluates a <a href=\"https:\/\/infrasos.com\/office-365-identity-access-manage-user-accounts-permissions\/\">user&#8217;s<\/a> access request and determines whether to grant, deny, or require further authentication.<\/p><p>A Conditional Access policy may evaluate user group membership, IP location, or device state signals. Then, it makes decisions like blocking access or granting access.<\/p><p>A policy may require additional authentication to grant access, such as 2FA or a compliant user<a href=\"https:\/\/infrasos.com\/azure-ad-joined-vs-registered-devices-whats-the-difference\/\"> device<\/a>. Other conditions are also considered.<\/p><p>Typical policies may disallow users utilizing legacy authentications from signing in, block sign-in from specific locations, or block users identified as &#8220;risky&#8221; from <a href=\"https:\/\/infrasos.com\/get-azureadauditsigninlogs-find-sign-in-logs-for-last-30-days-with-powershell\/\">signing in<\/a>.<\/p><p>Later this article discusses signals, decisions, and policies and how to use them to plan your Azure AD Conditional <a href=\"https:\/\/infrasos.com\/setup-azure-conditional-access-multi-factor-authentication-mfa\/\">Access policies<\/a>.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e25a5e8 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e25a5e8\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2ca6072 ot-flex-column-vertical\" data-id=\"2ca6072\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d3f1dac elementor-widget elementor-widget-text-editor\" data-id=\"d3f1dac\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/setup-azure-conditional-access-multi-factor-authentication-mfa\/\">Setup Azure Conditional Access + Multi Factor Authentication MFA<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-045d290 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"045d290\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d369118 ot-flex-column-vertical\" data-id=\"d369118\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-9cb526b elementor-widget elementor-widget-heading\" data-id=\"9cb526b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Subscription & Role Prerequisites for  Azure AD Conditional Access<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8ca9b6a elementor-widget elementor-widget-text-editor\" data-id=\"8ca9b6a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Before utilizing this Azure AD security feature, you must ensure that your account fulfils 2 conditions.<\/p><p>First, you need to have an assigned Azure AD Premium P1 or P2 license. Alternatively, if you lack these licenses, you initiate a <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/business\/identity-access\/azure-active-directory-enable\" target=\"_blank\" rel=\"noopener\">trial<\/a>.<\/p><p>Second, depending on your intended task, your account must possess any of the following roles. If you plan to create or modify Conditional Access policies, you require the <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/roles\/permissions-reference#conditional-access-administrator\" target=\"_blank\" rel=\"noopener\">Conditional Access Administrator<\/a> or <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/roles\/permissions-reference#security-administrator\" target=\"_blank\" rel=\"noopener\">Security Administrator<\/a> roles.<\/p><p>However, the <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/roles\/permissions-reference#security-reader\" target=\"_blank\" rel=\"noopener\">Security Reader<\/a> or <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/roles\/permissions-reference#global-reader\" target=\"_blank\" rel=\"noopener\">Global Reader<\/a> role suffices, if your purpose is solely to read policies.<\/p><p>Regarding the requirements, follow these steps to verify, if your account meets the conditions:<\/p><p>1. Sign in to <a href=\"https:\/\/portal.azure.com\/\" target=\"_blank\" rel=\"noopener\">portal.azure.com<\/a> and open Azure Active Directory. <br \/>2. The Overview tab displays the highest license applied to your account.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-24e097b ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"24e097b\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1f2a1dc ot-flex-column-vertical\" data-id=\"1f2a1dc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-700740f elementor-widget elementor-widget-image\" data-id=\"700740f\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-subscription.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure AD Conditional Access: How to Implement Access Policies and Controls\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg2MDYsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9TdWJzY3JpcHRpb24tYW5kLVJvbGUtUHJlcmVxdWlzaXRlcy1mb3ItQXp1cmUtQUQtQ29uZGl0aW9uYWwtQWNjZXNzLWhvdy10by1jaGVjay15b3VyLWN1cnJlbnQtc3Vic2NyaXB0aW9uLmpwZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"462\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-subscription-768x462.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38606\" alt=\"Azure AD Conditional Access: How to Implement Access Policies and Controls\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-subscription-768x462.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-subscription-300x180.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-subscription-1024x616.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-subscription-720x433.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-subscription.jpg 1485w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-266dd16 elementor-widget elementor-widget-text-editor\" data-id=\"266dd16\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>3. To check your assigned roles, click &#8220;Role and admins.&#8221; View your role &#8211; see the highlighted portion of the second screenshot below.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-197b8a0 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"197b8a0\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9165bf0 ot-flex-column-vertical\" data-id=\"9165bf0\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-fbfcd4f elementor-widget elementor-widget-image\" data-id=\"fbfcd4f\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-assigned-role.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"how to check your current assigned role\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg2MTAsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9TdWJzY3JpcHRpb24tYW5kLVJvbGUtUHJlcmVxdWlzaXRlcy1mb3ItQXp1cmUtQUQtQ29uZGl0aW9uYWwtQWNjZXNzLWhvdy10by1jaGVjay15b3VyLWN1cnJlbnQtYXNzaWduZWQtcm9sZS5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"460\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-assigned-role-768x460.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38610\" alt=\"how to check your current assigned role\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-assigned-role-768x460.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-assigned-role-300x180.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-assigned-role-1024x614.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-assigned-role-720x431.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-assigned-role.jpg 1487w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ad0ad8f elementor-widget elementor-widget-image\" data-id=\"ad0ad8f\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/how-to-check-your-current-assigned-role-step-2.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"how to check your current assigned role step 2\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg2MTQsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9ob3ctdG8tY2hlY2steW91ci1jdXJyZW50LWFzc2lnbmVkLXJvbGUtc3RlcC0yLmpwZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"461\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/how-to-check-your-current-assigned-role-step-2-768x461.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38614\" alt=\"how to check your current assigned role step 2\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/how-to-check-your-current-assigned-role-step-2-768x461.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/how-to-check-your-current-assigned-role-step-2-300x180.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/how-to-check-your-current-assigned-role-step-2-1024x615.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/how-to-check-your-current-assigned-role-step-2-720x432.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/how-to-check-your-current-assigned-role-step-2.jpg 1486w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d7721c5 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d7721c5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-726c12e ot-flex-column-vertical\" data-id=\"726c12e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d19f8a9 elementor-widget elementor-widget-text-editor\" data-id=\"d19f8a9\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/using-azure-ad-identity-protection-to-monitor-user-activity\/\">Using Azure AD Identity Protection to Monitor User Activity<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1ce171b ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1ce171b\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4235059 ot-flex-column-vertical\" data-id=\"4235059\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-74bc30f elementor-widget elementor-widget-heading\" data-id=\"74bc30f\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Why Implement Conditional Access<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-acc59c7 elementor-widget elementor-widget-text-editor\" data-id=\"acc59c7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Organizations use Conditional Access to<a href=\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/\"> secure their resources<\/a>. This Azure AD security feature enables businesses to control access for users, locations, and devices, deciding when to allow or deny access.<\/p><p>Additionally, Conditional Access safeguards application data by evaluating access requests based on predefined conditions and determining whether to permit sign-in requests. Another layer of protection is provided through device control.<\/p><p>By evaluating device health, Conditional Access helps organizations <a href=\"https:\/\/infrasos.com\/using-conditional-access-policies-to-enhance-office-365-security\/\">protect<\/a> their infrastructure from vulnerable devices. To achieve this goal, it evaluates the device&#8217;s state and uses that information to decide whether to permit or refuse sign-in requests.<\/p><p>In summary, Azure AD Conditional Access policies protect infrastructure by actively assessing real-time risks across 3 layers: user context, device status, and application and data access.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7ca4927 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7ca4927\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-cea23ac ot-flex-column-vertical\" data-id=\"cea23ac\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8c00d42 elementor-widget elementor-widget-text-editor\" data-id=\"8c00d42\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/how-to-find-active-directory-users-last-logon-time-using-aduc\/\">How to Find Active Directory Users Last Logon Time (Using ADUC)<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-33567c4 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"33567c4\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b8b3ad0 ot-flex-column-vertical\" data-id=\"b8b3ad0\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-19a6a29 elementor-widget elementor-widget-heading\" data-id=\"19a6a29\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">How to Implement Conditional Access and Controls in Azure AD<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3c1d92a elementor-widget elementor-widget-text-editor\" data-id=\"3c1d92a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>To implement Conditional Access, you need to create a policy in Azure Active Directory. But first, complete preliminary planning tasks.<\/p><p>Firstly, familiarize yourself with the components of a Conditional Access policy. This knowledge aids in correctly preparing for policy implementation.<\/p><p>In addition, Microsoft suggests excluding certain Azure AD accounts from your policies.<\/p><p>In the upcoming subsections, we guide you through the steps for implementing Conditional Access policies in Azure Active Directory.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b82d28a ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b82d28a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-390e341 ot-flex-column-vertical\" data-id=\"390e341\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b8e2cf6 elementor-widget elementor-widget-text-editor\" data-id=\"b8e2cf6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/user-reports\/logon-logoff-report\/\">Active Directory User Logon Logoff Report Tool (Advanced Filter)<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-75f0ef9 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"75f0ef9\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-eb50ef2 ot-flex-column-vertical\" data-id=\"eb50ef2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6613f29 elementor-widget elementor-widget-heading\" data-id=\"6613f29\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">Step 1: Evaluate Signals, Decisions, and Decide Policies<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3183765 elementor-widget elementor-widget-text-editor\" data-id=\"3183765\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Earlier, we explored how Azure AD Conditional Access combines signals and decisions to enforce <a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-user-reports\/\">organizational policies<\/a>. To assist you in policy planning, your initial step is to identify the signals that need evaluation.<\/p><p>These signals may vary depending on your organization&#8217;s requirements, but there are common ones to consider. Begin by evaluating whether <a href=\"https:\/\/infrasos.com\/top-10-best-iam-tools-identity-access-management\/\">access management<\/a> based on IP address location is necessary.<\/p><p>For example, create a &#8220;safe IP&#8221; list encompassing countries, cities, or IP ranges. Additionally, take into account user group memberships and <a href=\"https:\/\/infrasos.com\/azure-ad-joined-vs-registered-devices-whats-the-difference\/\">device<\/a> sign-in conditions.<\/p><p>Refer to the &#8220;<a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/conditional-access\/overview#common-signals\" target=\"_blank\" rel=\"noopener\">common signals<\/a>&#8221; for a comprehensive list.<\/p><p>Next crucial step is to decide how your policies make decisions. Precisely, determine conditions to allow or deny access.<\/p><p>Based on the signals, establish the <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/conditional-access\/overview#common-decisions\" target=\"_blank\" rel=\"noopener\">conditions<\/a> that warrant denying or permitting access. Moreover, if access is granted, decide whether additional authorization is required based on predetermined user or device signals.<\/p><p>For instance, you might require<a href=\"https:\/\/infrasos.com\/setup-azure-conditional-access-multi-factor-authentication-mfa\/\"> multifactor<\/a> authentication (MFA), a &#8220;compliant&#8221; device status, or other specific conditions.<\/p><p>Once you have gathered the necessary information about signals and decisions, proceed to the next subsection to begin creating your Conditional Access policies.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-7482f26d ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default elementor-invisible\" data-id=\"7482f26d\" data-element_type=\"section\" data-settings=\"{&quot;animation&quot;:&quot;bounceInRight&quot;,&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-4a2478f1 ot-flex-column-vertical\" data-id=\"4a2478f1\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-781fbc86 elementor-widget elementor-widget-heading\" data-id=\"781fbc86\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Try our Active Directory & Office 365 Reporting & Auditing Tools<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-35d576c3 elementor-widget elementor-widget-text-editor\" data-id=\"35d576c3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p style=\"text-align: center;\"><strong><span style=\"color: #ff6600;\">Try us out<\/span> for <span style=\"color: #ff0000;\">Free<\/span>.\u00a0 100&#8217;s of report templates available. Easily customise your own reports on AD, Azure AD &amp; Office 355.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-31d9df1d ot-flex-column-vertical\" data-id=\"31d9df1d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4273ddea elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"4273ddea\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor-pro - v3.10.3 - 29-01-2023 *\/\n.elementor-button.elementor-hidden,.elementor-hidden{display:none}.e-form__step{width:100%}.e-form__step:not(.elementor-hidden){display:flex;flex-wrap:wrap}.e-form__buttons{flex-wrap:wrap}.e-form__buttons,.e-form__buttons__wrapper{display:flex}.e-form__indicators{display:flex;justify-content:space-between;align-items:center;flex-wrap:nowrap;font-size:13px;margin-bottom:var(--e-form-steps-indicators-spacing)}.e-form__indicators__indicator{display:flex;flex-direction:column;align-items:center;justify-content:center;flex-basis:0;padding:0 var(--e-form-steps-divider-gap)}.e-form__indicators__indicator__progress{width:100%;position:relative;background-color:var(--e-form-steps-indicator-progress-background-color);border-radius:var(--e-form-steps-indicator-progress-border-radius);overflow:hidden}.e-form__indicators__indicator__progress__meter{width:var(--e-form-steps-indicator-progress-meter-width,0);height:var(--e-form-steps-indicator-progress-height);line-height:var(--e-form-steps-indicator-progress-height);padding-right:15px;border-radius:var(--e-form-steps-indicator-progress-border-radius);background-color:var(--e-form-steps-indicator-progress-color);color:var(--e-form-steps-indicator-progress-meter-color);text-align:right;transition:width .1s linear}.e-form__indicators__indicator:first-child{padding-left:0}.e-form__indicators__indicator:last-child{padding-right:0}.e-form__indicators__indicator--state-inactive{color:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-inactive [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-inactive-secondary-color,#fff)}.e-form__indicators__indicator--state-inactive object,.e-form__indicators__indicator--state-inactive svg{fill:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-active{color:var(--e-form-steps-indicator-active-primary-color,#39b54a);border-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active object,.e-form__indicators__indicator--state-active svg{fill:var(--e-form-steps-indicator-active-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed{color:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator--state-completed [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator__label{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator--shape-none{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a);background-color:initial}.e-form__indicators__indicator--state-completed object,.e-form__indicators__indicator--state-completed svg{fill:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator__icon{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);font-size:var(--e-form-steps-indicator-icon-size);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;overflow:hidden;margin-bottom:10px}.e-form__indicators__indicator__icon img,.e-form__indicators__indicator__icon object,.e-form__indicators__indicator__icon svg{width:var(--e-form-steps-indicator-icon-size);height:auto}.e-form__indicators__indicator__icon .e-font-icon-svg{height:1em}.e-form__indicators__indicator__number{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;margin-bottom:10px}.e-form__indicators__indicator--shape-circle{border-radius:50%}.e-form__indicators__indicator--shape-square{border-radius:0}.e-form__indicators__indicator--shape-rounded{border-radius:5px}.e-form__indicators__indicator--shape-none{border:0}.e-form__indicators__indicator__label{text-align:center}.e-form__indicators__indicator__separator{width:100%;height:var(--e-form-steps-divider-width);background-color:#c2cbd2}.e-form__indicators--type-icon,.e-form__indicators--type-icon_text,.e-form__indicators--type-number,.e-form__indicators--type-number_text{align-items:flex-start}.e-form__indicators--type-icon .e-form__indicators__indicator__separator,.e-form__indicators--type-icon_text .e-form__indicators__indicator__separator,.e-form__indicators--type-number .e-form__indicators__indicator__separator,.e-form__indicators--type-number_text .e-form__indicators__indicator__separator{margin-top:calc(var(--e-form-steps-indicator-padding, 30px) \/ 2 - var(--e-form-steps-divider-width, 1px) \/ 2)}.elementor-field-type-hidden{display:none}.elementor-field-type-html{display:inline-block}.elementor-login .elementor-lost-password,.elementor-login .elementor-remember-me{font-size:.85em}.elementor-field-type-recaptcha_v3 .elementor-field-label{display:none}.elementor-field-type-recaptcha_v3 .grecaptcha-badge{z-index:1}.elementor-button .elementor-form-spinner{order:3}.elementor-form .elementor-button>span{display:flex;justify-content:center;align-items:center}.elementor-form .elementor-button .elementor-button-text{white-space:normal;flex-grow:0}.elementor-form .elementor-button svg{height:auto}.elementor-form .elementor-button .e-font-icon-svg{height:1em}.elementor-select-wrapper .select-caret-down-wrapper{position:absolute;top:50%;transform:translateY(-50%);inset-inline-end:10px;pointer-events:none;font-size:11px}.elementor-select-wrapper .select-caret-down-wrapper svg{display:unset;width:1em;aspect-ratio:unset;fill:currentColor}.elementor-select-wrapper .select-caret-down-wrapper i{font-size:19px;line-height:2}.elementor-select-wrapper.remove-before:before{content:\"\"!important}<\/style>\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"38471\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"4273ddea\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-401f7c0 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"401f7c0\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6323413 ot-flex-column-vertical\" data-id=\"6323413\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d7bc2f8 elementor-widget elementor-widget-text-editor\" data-id=\"d7bc2f8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/get-aduser-filter-ou-list-users-from-a-specific-ou\/\">Get-ADUser Filter OU \u2013 List Users from a Specific OU<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-cf6a467 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"cf6a467\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-387506a ot-flex-column-vertical\" data-id=\"387506a\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e09b824 elementor-widget elementor-widget-heading\" data-id=\"e09b824\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">Step 2: Create Conditional Access Policies Based on Signals and Decisions<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7bcae0b elementor-widget elementor-widget-text-editor\" data-id=\"7bcae0b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Before implementing Azure AD Conditional Access policies, consider <a href=\"https:\/\/www.egroup-us.com\/azure-ad-conditional-access-baselines-best-practices\/\" target=\"_blank\" rel=\"noopener\">these nine<\/a> policies that<a href=\"https:\/\/infrasos.com\/why-monitoring-azure-ad-user-activity-is-essential-for-security\/\"> protect your Azure AD infrastructure<\/a>. Moreover, you may find these <a href=\"https:\/\/www.egroup-us.com\/azure-ad-conditional-access-baselines-best-practices\/\" target=\"_blank\" rel=\"noopener\">best practices<\/a> beneficial.<\/p><p>After considering those recommendations, proceed with the following steps to create a Conditional Access policy in the Azure Active Directory portal:<\/p><p>1. Open the Azure portal, <a href=\"https:\/\/portal.azure.com\/\" target=\"_blank\" rel=\"noopener\">portal.azure.com<\/a>, and sign in.<br \/>2. Search &#8220;conditional access&#8221; and open &#8220;Azure AD Conditional Access.&#8221;<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-323d976 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"323d976\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0c762e0 ot-flex-column-vertical\" data-id=\"0c762e0\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-103f922 elementor-widget elementor-widget-image\" data-id=\"103f922\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-2-Create-Azure-AD-Conditional-Access-Policy-Based-on-Signals-and-Decisions\u200b.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Step 2 - Create Azure AD Conditional Access Policy Based on Signals and Decisions\u200b\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg3OTgsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9TdGVwLTItQ3JlYXRlLUF6dXJlLUFELUNvbmRpdGlvbmFsLUFjY2Vzcy1Qb2xpY3ktQmFzZWQtb24tU2lnbmFscy1hbmQtRGVjaXNpb25zXHUyMDBiLmpwZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"483\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-2-Create-Azure-AD-Conditional-Access-Policy-Based-on-Signals-and-Decisions\u200b-768x483.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38798\" alt=\"Step 2 - Create Azure AD Conditional Access Policy Based on Signals and Decisions\u200b\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-2-Create-Azure-AD-Conditional-Access-Policy-Based-on-Signals-and-Decisions\u200b-768x483.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-2-Create-Azure-AD-Conditional-Access-Policy-Based-on-Signals-and-Decisions\u200b-300x189.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-2-Create-Azure-AD-Conditional-Access-Policy-Based-on-Signals-and-Decisions\u200b-1024x644.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-2-Create-Azure-AD-Conditional-Access-Policy-Based-on-Signals-and-Decisions\u200b-720x453.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-2-Create-Azure-AD-Conditional-Access-Policy-Based-on-Signals-and-Decisions\u200b.jpg 1478w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6e002ed elementor-widget elementor-widget-text-editor\" data-id=\"6e002ed\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>3. Then, on the Overview page, click &#8220;+ create new policy.&#8221;\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5dfc0ed ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5dfc0ed\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-15c51e4 ot-flex-column-vertical\" data-id=\"15c51e4\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-71c2634 elementor-widget elementor-widget-image\" data-id=\"71c2634\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Create-Conditional-Access-Policies-Based-on-Signals-and-Decisions-second-step.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Create Conditional Access Policies Based on Signals and Decisions - second step\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg4MDgsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9DcmVhdGUtQ29uZGl0aW9uYWwtQWNjZXNzLVBvbGljaWVzLUJhc2VkLW9uLVNpZ25hbHMtYW5kLURlY2lzaW9ucy1zZWNvbmQtc3RlcC5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"460\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Create-Conditional-Access-Policies-Based-on-Signals-and-Decisions-second-step-768x460.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38808\" alt=\"Create Conditional Access Policies Based on Signals and Decisions - second step\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Create-Conditional-Access-Policies-Based-on-Signals-and-Decisions-second-step-768x460.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Create-Conditional-Access-Policies-Based-on-Signals-and-Decisions-second-step-300x180.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Create-Conditional-Access-Policies-Based-on-Signals-and-Decisions-second-step-1024x613.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Create-Conditional-Access-Policies-Based-on-Signals-and-Decisions-second-step-720x431.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Create-Conditional-Access-Policies-Based-on-Signals-and-Decisions-second-step.jpg 1483w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d1ea599 elementor-widget elementor-widget-text-editor\" data-id=\"d1ea599\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>4. Finally, complete the configurations on the <strong>New Conditional Access policy<\/strong> page. See the information below this screenshot for details.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8e070f4 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8e070f4\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7ec944f ot-flex-column-vertical\" data-id=\"7ec944f\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-33f60ce elementor-widget elementor-widget-image\" data-id=\"33f60ce\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Conditional-Access-New-Conditional-Access-policy-page.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure AD Conditional Access - New Conditional Access policy page\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg4MjEsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9BenVyZS1BRC1Db25kaXRpb25hbC1BY2Nlc3MtTmV3LUNvbmRpdGlvbmFsLUFjY2Vzcy1wb2xpY3ktcGFnZS5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"459\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Conditional-Access-New-Conditional-Access-policy-page-768x459.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38821\" alt=\"Azure AD Conditional Access - New Conditional Access policy page\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Conditional-Access-New-Conditional-Access-policy-page-768x459.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Conditional-Access-New-Conditional-Access-policy-page-300x179.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Conditional-Access-New-Conditional-Access-policy-page-1024x612.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Conditional-Access-New-Conditional-Access-policy-page-720x431.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Conditional-Access-New-Conditional-Access-policy-page.jpg 1485w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-38803e5 elementor-widget elementor-widget-text-editor\" data-id=\"38803e5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Start by entering a descriptive name for the access policy. Then, configure the &#8220;Signals&#8221; by clicking on <strong>Users<\/strong>, <strong>Cloud apps or actions<\/strong>, and\/or <strong>Conditions<\/strong>.<\/p><p>Next, configure the &#8220;Decisions&#8221; by clicking on &#8220;0 controls selected&#8221; (labelled 3).<\/p><p>Once you have finished setting up the new policy, Microsoft recommends using &#8220;Report only&#8221; to gather session information before eventually enabling the policy. Finally, click on Create to establish the new policy.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e7f9ee0 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e7f9ee0\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-608aa9d ot-flex-column-vertical\" data-id=\"608aa9d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-12f1e66 elementor-widget elementor-widget-text-editor\" data-id=\"12f1e66\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/user-reports\/direct-reports\/\">Check out Active Directory Direct Reports Tool (InfraSOS)<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-48ce82d ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"48ce82d\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8166e24 ot-flex-column-vertical\" data-id=\"8166e24\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8dc6789 elementor-widget elementor-widget-heading\" data-id=\"8dc6789\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">Step 3: Implement User Exclusions<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9fcdf71 elementor-widget elementor-widget-text-editor\" data-id=\"9fcdf71\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Microsoft recommends excluding some<a href=\"https:\/\/infrasos.com\/using-azure-ad-identity-protection-to-monitor-user-activity\/\"> user accounts<\/a> to avoid tenant wide lockouts. Specifically, <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/roles\/security-emergency-access\" target=\"_blank\" rel=\"noopener\">Emergency access<\/a> access accounts must be excluded.<\/p><p>Important service accounts and accounts used in scripts or codes should also be excluded from your access policies.<\/p><p>To exclude the desired accounts, open the policy from the Azure AD Access Control page. Then, go to the <a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-user-reports\/\">Users section<\/a> and click on the &#8220;Exclude&#8221; tab.<\/p><p>Finally, select the group, check the box, add the users to be excluded, and save the policy.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c7aa9be ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c7aa9be\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-34401f2 ot-flex-column-vertical\" data-id=\"34401f2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-786c2d0 elementor-widget elementor-widget-image\" data-id=\"786c2d0\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-3-Implement-User-Exclusions-add-user-exclusions-to-an-Azure-AD-Conditional-Access-Policy.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Step 3 - Implement User Exclusions - add user exclusions to a Conditional Access Policy\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg4NDYsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9TdGVwLTMtSW1wbGVtZW50LVVzZXItRXhjbHVzaW9ucy1hZGQtdXNlci1leGNsdXNpb25zLXRvLWFuLUF6dXJlLUFELUNvbmRpdGlvbmFsLUFjY2Vzcy1Qb2xpY3kuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"466\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-3-Implement-User-Exclusions-add-user-exclusions-to-an-Azure-AD-Conditional-Access-Policy-768x466.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38846\" alt=\"Step 3 - Implement User Exclusions - add user exclusions to a Conditional Access Policy\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-3-Implement-User-Exclusions-add-user-exclusions-to-an-Azure-AD-Conditional-Access-Policy-768x466.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-3-Implement-User-Exclusions-add-user-exclusions-to-an-Azure-AD-Conditional-Access-Policy-300x182.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-3-Implement-User-Exclusions-add-user-exclusions-to-an-Azure-AD-Conditional-Access-Policy-1024x621.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-3-Implement-User-Exclusions-add-user-exclusions-to-an-Azure-AD-Conditional-Access-Policy-720x437.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-3-Implement-User-Exclusions-add-user-exclusions-to-an-Azure-AD-Conditional-Access-Policy.jpg 1482w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6e863dd ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6e863dd\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d345415 ot-flex-column-vertical\" data-id=\"d345415\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2a969e4 elementor-widget elementor-widget-text-editor\" data-id=\"2a969e4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/user-reports\/enabled-users\/\">Deploy Active Directory Enabled Users Report<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5acf464 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5acf464\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-145e102 ot-flex-column-vertical\" data-id=\"145e102\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a3c44a3 elementor-widget elementor-widget-heading\" data-id=\"a3c44a3\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">Step 4: Manage Azure AD Conditional Access<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-250dc63 elementor-widget elementor-widget-text-editor\" data-id=\"250dc63\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The conditional Access Policy has some standard settings you may need to configure. Find these settings under the <strong>Manage\u00a0<\/strong>node.<\/p><p>Starting with &#8220;Named locations,&#8221; use this to create a list of locations you want to use when creating an access policy. For instance, you may create &#8220;safe countries&#8221; and a &#8220;blocked countries&#8221; lists.<\/p><p>Then, use these lists in Conditions -&gt; Locations -&gt; Include or Exclude section of a policy. The second screenshot below demonstrates how &#8220;named locations&#8221; are used in a Conditional Access policy.\u00a0\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-0520deb ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"0520deb\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4129b0c ot-flex-column-vertical\" data-id=\"4129b0c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3e8a839 elementor-widget elementor-widget-image\" data-id=\"3e8a839\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Named-locations.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Step 4 - Conditional Access - setup &#039;Named locations&#039;\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg4NTksInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9TdGVwLTQtTWFuYWdlLUF6dXJlLUFELUNvbmRpdGlvbmFsLUFjY2Vzcy1zZXR1cC1OYW1lZC1sb2NhdGlvbnMuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"462\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Named-locations-768x462.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38859\" alt=\"Step 4 - Conditional Access - setup &#039;Named locations&#039;\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Named-locations-768x462.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Named-locations-300x180.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Named-locations-1024x616.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Named-locations-720x433.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Named-locations.jpg 1480w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2d9aaaa elementor-widget elementor-widget-image\" data-id=\"2d9aaaa\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Conditional-Access-use-Named-locations-in-Conditional-Access-Policies.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Step 4 - Manage Conditional Access - use &#039;Named locations&#039; in Conditional Access Policies\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg4NjYsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9TdGVwLTQtTWFuYWdlLUNvbmRpdGlvbmFsLUFjY2Vzcy11c2UtTmFtZWQtbG9jYXRpb25zLWluLUNvbmRpdGlvbmFsLUFjY2Vzcy1Qb2xpY2llcy5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"459\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Conditional-Access-use-Named-locations-in-Conditional-Access-Policies-768x459.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38866\" alt=\"Step 4 - Manage Conditional Access - use &#039;Named locations&#039; in Conditional Access Policies\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Conditional-Access-use-Named-locations-in-Conditional-Access-Policies-768x459.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Conditional-Access-use-Named-locations-in-Conditional-Access-Policies-300x179.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Conditional-Access-use-Named-locations-in-Conditional-Access-Policies-1024x612.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Conditional-Access-use-Named-locations-in-Conditional-Access-Policies-720x430.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Conditional-Access-use-Named-locations-in-Conditional-Access-Policies.jpg 1499w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a12059e elementor-widget elementor-widget-text-editor\" data-id=\"a12059e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Apart from named locations, security admins configure &#8220;Custom controls.&#8221; This feature (still in preview), when we wrote this article in May 2023, allows the creation of conditional controls using JSON.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-853c6da ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"853c6da\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-35b83e2 ot-flex-column-vertical\" data-id=\"35b83e2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-cd1ca57 elementor-widget elementor-widget-image\" data-id=\"cd1ca57\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-conditional-controls.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Step 4 - Manage Conditional Access - setup &#039;conditional controls&#039;\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjM4ODc2IiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMDVcL1N0ZXAtNC1NYW5hZ2UtQXp1cmUtQUQtQ29uZGl0aW9uYWwtQWNjZXNzLXNldHVwLWNvbmRpdGlvbmFsLWNvbnRyb2xzLmpwZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"463\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-conditional-controls-768x463.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38876\" alt=\"Step 4 - Manage Conditional Access - setup &#039;conditional controls&#039;\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-conditional-controls-768x463.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-conditional-controls-300x181.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-conditional-controls-1024x617.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-conditional-controls-720x434.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-conditional-controls.jpg 1484w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-22ee1bc elementor-widget elementor-widget-text-editor\" data-id=\"22ee1bc\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Other features of Azure AD Conditional Access available for configuration are &#8220;Terms of use&#8221;, &#8220;VPN connectivity,&#8221; &#8220;Authentication context,&#8221; and\u00a0 &#8220;Authentication strengths.&#8221;<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9355335 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9355335\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ec9e79e ot-flex-column-vertical\" data-id=\"ec9e79e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f3e0789 elementor-widget elementor-widget-image\" data-id=\"f3e0789\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Terms-of-use-VPN-connectivity-Authentication-context-authenticatin-strenghts.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Step 4 - Manage  Conditional Access - setup &#039;Terms of use&#039; &#039;VPN connectivity&#039;, &#039;Authentication context&#039;, &#039;authenticatin strenghts&#039;\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjM4ODkyIiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMDVcL1N0ZXAtNC1NYW5hZ2UtQXp1cmUtQUQtQ29uZGl0aW9uYWwtQWNjZXNzLXNldHVwLVRlcm1zLW9mLXVzZS1WUE4tY29ubmVjdGl2aXR5LUF1dGhlbnRpY2F0aW9uLWNvbnRleHQtYXV0aGVudGljYXRpbi1zdHJlbmdodHMuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"462\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Terms-of-use-VPN-connectivity-Authentication-context-authenticatin-strenghts-768x462.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38892\" alt=\"Step 4 - Manage Conditional Access - setup &#039;Terms of use&#039; &#039;VPN connectivity&#039;, &#039;Authentication context&#039;, &#039;authenticatin strenghts&#039;\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Terms-of-use-VPN-connectivity-Authentication-context-authenticatin-strenghts-768x462.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Terms-of-use-VPN-connectivity-Authentication-context-authenticatin-strenghts-300x181.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Terms-of-use-VPN-connectivity-Authentication-context-authenticatin-strenghts-1024x616.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Terms-of-use-VPN-connectivity-Authentication-context-authenticatin-strenghts-720x433.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-4-Manage-Azure-AD-Conditional-Access-setup-Terms-of-use-VPN-connectivity-Authentication-context-authenticatin-strenghts.jpg 1484w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5cd0e09 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5cd0e09\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-05f4cce ot-flex-column-vertical\" data-id=\"05f4cce\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5515676 elementor-widget elementor-widget-text-editor\" data-id=\"5515676\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/user-reports\/\">See our Active Directory User Reports Tool<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-ff2fc99 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ff2fc99\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7b1717a ot-flex-column-vertical\" data-id=\"7b1717a\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d7a4723 elementor-widget elementor-widget-heading\" data-id=\"d7a4723\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">Step 5: Monitor Conditional Access with Sign-in and Audit Logs<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0303e0d elementor-widget elementor-widget-text-editor\" data-id=\"0303e0d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Once you have configured Azure AD Conditional Access, it is essential to <a href=\"https:\/\/infrasos.com\/azure-ad-privileged-identity-management-manage-monitor-privileged-accounts\/\">monitor<\/a> <a href=\"https:\/\/infrasos.com\/office-365-reporting\/\">user sign-ins and activities<\/a>. This monitoring process provides valuable data for evaluating the impact of Conditional Access.<\/p><p>To monitor Conditional Access policies in Microsoft Azure AD, you utilize 2 logs: Sign-in Logs and <a href=\"https:\/\/infrasos.com\/check-azure-ad-audit-logs-for-user-sign-ins-success-and-failures\/\">Audit<\/a> Logs. These logs are found in the &#8220;Monitoring&#8221; section of the Azure AD Conditional Access portal.<\/p><p>When accessing &#8220;Sign-in logs&#8221;, click &#8220;Columns&#8221; to configure the columns you require.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-61e8cc0 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"61e8cc0\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-fbdad2c ot-flex-column-vertical\" data-id=\"fbdad2c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d79d371 elementor-widget elementor-widget-image\" data-id=\"d79d371\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Step 5 - Monitor Conditional Access with Sign-in and Audit Logs - configure Sign-in logs&#039; columns\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg5NTMsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9TdGVwLTUtTW9uaXRvci1Db25kaXRpb25hbC1BY2Nlc3Mtd2l0aC1TaWduLWluLWFuZC1BdWRpdC1Mb2dzLWNvbmZpZ3VyZS1TaWduLWluLWxvZ3MtY29sdW1ucy5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"428\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-768x428.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38953\" alt=\"Step 5 - Monitor Conditional Access with Sign-in and Audit Logs - configure Sign-in logs&#039; columns\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-768x428.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-300x167.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-1024x570.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-1536x855.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-720x401.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns.jpg 1643w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c509a9e elementor-widget elementor-widget-text-editor\" data-id=\"c509a9e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>After the &#8220;Columns&#8221; flyout is displayed, check the relevant columns for<a href=\"https:\/\/infrasos.com\/azure-ad-monitoring\/\"> monitoring<\/a> Conditional Access policies. Once you have finished, click &#8220;Save.&#8221;<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9af913a ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9af913a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9121c19 ot-flex-column-vertical\" data-id=\"9121c19\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-dc0d3cb elementor-widget elementor-widget-image\" data-id=\"dc0d3cb\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-step-2.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Step 5 - Monitor Conditional Access with Sign-in and Audit Logs - configure Sign-in logs&#039; columns step 2\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg5NjAsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9TdGVwLTUtTW9uaXRvci1Db25kaXRpb25hbC1BY2Nlc3Mtd2l0aC1TaWduLWluLWFuZC1BdWRpdC1Mb2dzLWNvbmZpZ3VyZS1TaWduLWluLWxvZ3MtY29sdW1ucy1zdGVwLTIuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"432\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-step-2-768x432.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38960\" alt=\"Step 5 - Monitor Conditional Access with Sign-in and Audit Logs - configure Sign-in logs&#039; columns step 2\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-step-2-768x432.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-step-2-300x169.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-step-2-1024x576.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-step-2-1536x864.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-step-2-720x405.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Step-5-Monitor-Conditional-Access-with-Sign-in-and-Audit-Logs-configure-Sign-in-logs-columns-step-2.jpg 1647w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-efa9769 elementor-widget elementor-widget-text-editor\" data-id=\"efa9769\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>For example, I selected the <strong>User<\/strong>, <strong>IP address<\/strong>, <strong>Location<\/strong>, and <strong>Conditional Access<\/strong> columns to analyse the user&#8217;s sign-in based on these parameters.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-059bdba ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"059bdba\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-13d071e ot-flex-column-vertical\" data-id=\"13d071e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-478aa40 elementor-widget elementor-widget-image\" data-id=\"478aa40\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-Active-Direcytory-Sign-in-logs.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure Active Directory Sign-in logs\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzg5NzksInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9BenVyZS1BY3RpdmUtRGlyZWN5dG9yeS1TaWduLWluLWxvZ3MuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"432\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-Active-Direcytory-Sign-in-logs-768x432.jpg\" class=\"attachment-medium_large size-medium_large wp-image-38979\" alt=\"Azure Active Directory Sign-in logs\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-Active-Direcytory-Sign-in-logs-768x432.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-Active-Direcytory-Sign-in-logs-300x169.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-Active-Direcytory-Sign-in-logs-1024x576.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-Active-Direcytory-Sign-in-logs-1536x864.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-Active-Direcytory-Sign-in-logs-720x405.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-Active-Direcytory-Sign-in-logs.jpg 1634w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-283af61 elementor-widget elementor-widget-text-editor\" data-id=\"283af61\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>In addition to the &#8220;Sign-in logs,&#8221; also use the &#8220;Audit logs&#8221; to learn and analyse user behaviours. We highly recommend reading our article on Azure AD <a href=\"https:\/\/infrasos.com\/check-azure-ad-audit-logs-for-user-sign-ins-success-and-failures\/\">audit logs<\/a> for a more comprehensive understanding of Azure Sign-in logs.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-07ac417 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"07ac417\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-04f4f2a ot-flex-column-vertical\" data-id=\"04f4f2a\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ed8ffcd elementor-widget elementor-widget-text-editor\" data-id=\"ed8ffcd\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/azure-ad-monitoring\/\">Deploy Azure AD Monitoring<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e5ffbb7 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e5ffbb7\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3d1be90 ot-flex-column-vertical\" data-id=\"3d1be90\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e11ba7c elementor-widget elementor-widget-heading\" data-id=\"e11ba7c\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Azure AD Conditional Access: Implement Access Policies & Controls Conclusion<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2044328 elementor-widget elementor-widget-text-editor\" data-id=\"2044328\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>This article provided a comprehensive overview of Azure AD Conditional Access and detailed guidance on implementing access policies and controls.<\/p><p>It began by explaining what Azure Active Directory Conditional Access is. It then outlined the subscription and role prerequisites for implementing this Azure AD security feature.<\/p><p>Moreover, we highlighted the benefits of implementing Conditional Access, emphasizing its role in enhancing <a href=\"https:\/\/infrasos.com\/best-practices-for-responding-to-azure-ad-security-incidents\/\">security<\/a> and mitigating risks associated with<a href=\"https:\/\/infrasos.com\/the-importance-of-role-based-access-control-in-azure-ad\/\"> unauthorized access<\/a>.<\/p><p>Lastly, the article provided step-by-step instructions on implementing Conditional Access and effectively applying access controls in Azure AD.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-624c70e7 elementor-section-content-middle ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"624c70e7\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-extended\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-4a67c964 ot-flex-column-vertical\" data-id=\"4a67c964\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-555ffdd6 elementor-widget elementor-widget-image\" data-id=\"555ffdd6\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"113\" height=\"101\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/05\/InfraSOS-Logo-Icon-1.png\" class=\"attachment-full size-full wp-image-5788\" alt=\"InfraSOS-AD-Tools\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-5c27d9a4 ot-flex-column-vertical\" data-id=\"5c27d9a4\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-247165e elementor-widget elementor-widget-heading\" data-id=\"247165e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Try InfraSOS for FREE<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6538403d elementor-widget elementor-widget-text-editor\" data-id=\"6538403d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Invite your team and explore InfraSOS features for free<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4ee2d77e elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"4ee2d77e\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"38471\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"4ee2d77e\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-64d4269f elementor-icon-list--layout-inline elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"64d4269f\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<link rel=\"stylesheet\" href=\"https:\/\/infrasos.com\/wp-content\/plugins\/elementor\/assets\/css\/widget-icon-list.min.css\">\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-arrow-up\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Free 15-Days Trial<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">SaaS Reporting & Auditing Solution<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Full Access to All Features<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Azure AD Conditional Access: Implement Access Policies &amp; Controls. Are you familiar with Azure AD Conditional Access and interested in learning how to implement it? Please read on. First, we explain the meaning of Azure AD Conditional Access. This gives you a clear understanding of the concept. Next, we discuss the specific roles and subscriptions [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[35],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Azure AD Conditional Access: Implement Access Policies &amp; Controls<\/title>\n<meta name=\"description\" content=\"Azure AD Conditional Access: Implement Access Policies &amp; Controls. Are you familiar with Azure AD Conditional Access and interested in learning how to\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Azure AD Conditional Access: Implement Access Policies &amp; Controls\" \/>\n<meta property=\"og:description\" content=\"Azure AD Conditional Access: Implement Access Policies &amp; Controls. Are you familiar with Azure AD Conditional Access and interested in learning how to\" \/>\n<meta property=\"og:url\" content=\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\" \/>\n<meta property=\"og:site_name\" content=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infrasos\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-31T11:50:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-30T08:57:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-subscription-768x462.jpg\" \/>\n<meta name=\"author\" content=\"Victor Ashiedu\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:site\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Victor Ashiedu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\"},\"author\":{\"name\":\"Victor Ashiedu\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6\"},\"headline\":\"Azure AD Conditional Access: Implement Access Policies &#038; Controls\",\"datePublished\":\"2023-05-31T11:50:00+00:00\",\"dateModified\":\"2023-08-30T08:57:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\"},\"wordCount\":1636,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"articleSection\":[\"Azure AD\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\",\"url\":\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\",\"name\":\"Azure AD Conditional Access: Implement Access Policies & Controls\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/#website\"},\"datePublished\":\"2023-05-31T11:50:00+00:00\",\"dateModified\":\"2023-08-30T08:57:06+00:00\",\"description\":\"Azure AD Conditional Access: Implement Access Policies &amp; Controls. Are you familiar with Azure AD Conditional Access and interested in learning how to\",\"breadcrumb\":{\"@id\":\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/infrasos.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Azure AD Conditional Access: Implement Access Policies &#038; Controls\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/infrasos.com\/#website\",\"url\":\"https:\/\/infrasos.com\/\",\"name\":\"Active Directory Tools, Report, Monitor &amp; Manage AD\",\"description\":\"Active Directory &amp; Office 365 SaaS Reporting Tool\",\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/infrasos.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/infrasos.com\/#organization\",\"name\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\",\"url\":\"https:\/\/infrasos.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"contentUrl\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"width\":113,\"height\":101,\"caption\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\"},\"image\":{\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/infrasos\/\",\"https:\/\/twitter.com\/infra_sos\",\"https:\/\/www.linkedin.com\/showcase\/86283876\",\"https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6\",\"name\":\"Victor Ashiedu\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g\",\"caption\":\"Victor Ashiedu\"},\"description\":\"Victor is an IT pro based in Manchester, UK. With over 22 years of experience managing Windows Server, Active Directory, and Powershell, and 7 years of expertise in Azure AD and Office 365, he's a seasoned expert in his field. When he's not working, he loves spending time with his family - a wife and a 5-year-old. Victor is passionate about helping businesses succeed in today's fast-changing tech landscape.\",\"sameAs\":[\"https:\/\/www.itechguides.com\/author\/victor-ashiedu\/\",\"https:\/\/www.linkedin.com\/in\/vashiedu\/\"],\"url\":\"https:\/\/infrasos.com\/author\/ashiedu5843\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Azure AD Conditional Access: Implement Access Policies & Controls","description":"Azure AD Conditional Access: Implement Access Policies &amp; Controls. Are you familiar with Azure AD Conditional Access and interested in learning how to","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/","og_locale":"en_US","og_type":"article","og_title":"Azure AD Conditional Access: Implement Access Policies & Controls","og_description":"Azure AD Conditional Access: Implement Access Policies &amp; Controls. Are you familiar with Azure AD Conditional Access and interested in learning how to","og_url":"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/","og_site_name":"Active Directory Tools, Report, Monitor &amp; Manage AD","article_publisher":"https:\/\/www.facebook.com\/infrasos\/","article_published_time":"2023-05-31T11:50:00+00:00","article_modified_time":"2023-08-30T08:57:06+00:00","og_image":[{"url":"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Subscription-and-Role-Prerequisites-for-Azure-AD-Conditional-Access-how-to-check-your-current-subscription-768x462.jpg"}],"author":"Victor Ashiedu","twitter_card":"summary_large_image","twitter_creator":"@infra_sos","twitter_site":"@infra_sos","twitter_misc":{"Written by":"Victor Ashiedu","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/#article","isPartOf":{"@id":"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/"},"author":{"name":"Victor Ashiedu","@id":"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6"},"headline":"Azure AD Conditional Access: Implement Access Policies &#038; Controls","datePublished":"2023-05-31T11:50:00+00:00","dateModified":"2023-08-30T08:57:06+00:00","mainEntityOfPage":{"@id":"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/"},"wordCount":1636,"commentCount":0,"publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"articleSection":["Azure AD"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/","url":"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/","name":"Azure AD Conditional Access: Implement Access Policies & Controls","isPartOf":{"@id":"https:\/\/infrasos.com\/#website"},"datePublished":"2023-05-31T11:50:00+00:00","dateModified":"2023-08-30T08:57:06+00:00","description":"Azure AD Conditional Access: Implement Access Policies &amp; Controls. Are you familiar with Azure AD Conditional Access and interested in learning how to","breadcrumb":{"@id":"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/infrasos.com\/"},{"@type":"ListItem","position":2,"name":"Azure AD Conditional Access: Implement Access Policies &#038; Controls"}]},{"@type":"WebSite","@id":"https:\/\/infrasos.com\/#website","url":"https:\/\/infrasos.com\/","name":"Active Directory Tools, Report, Monitor &amp; Manage AD","description":"Active Directory &amp; Office 365 SaaS Reporting Tool","publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/infrasos.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/infrasos.com\/#organization","name":"InfraSOS - Active Directory & Office 365 Reporting Tools","url":"https:\/\/infrasos.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/","url":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","contentUrl":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","width":113,"height":101,"caption":"InfraSOS - Active Directory & Office 365 Reporting Tools"},"image":{"@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infrasos\/","https:\/\/twitter.com\/infra_sos","https:\/\/www.linkedin.com\/showcase\/86283876","https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg"]},{"@type":"Person","@id":"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6","name":"Victor Ashiedu","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g","caption":"Victor Ashiedu"},"description":"Victor is an IT pro based in Manchester, UK. With over 22 years of experience managing Windows Server, Active Directory, and Powershell, and 7 years of expertise in Azure AD and Office 365, he's a seasoned expert in his field. When he's not working, he loves spending time with his family - a wife and a 5-year-old. Victor is passionate about helping businesses succeed in today's fast-changing tech landscape.","sameAs":["https:\/\/www.itechguides.com\/author\/victor-ashiedu\/","https:\/\/www.linkedin.com\/in\/vashiedu\/"],"url":"https:\/\/infrasos.com\/author\/ashiedu5843\/"}]}},"_links":{"self":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/38471"}],"collection":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/comments?post=38471"}],"version-history":[{"count":569,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/38471\/revisions"}],"predecessor-version":[{"id":53127,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/38471\/revisions\/53127"}],"wp:attachment":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/media?parent=38471"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/categories?post=38471"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/tags?post=38471"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}