Simple definition
Rules that allow, block or reinforce a connection according to its context.
Technical definition
Conditional Access in Entra ID evaluates signals such as user, application, risk, location or compliance of the device before granting a token.
What is it used for ?
Impose MFA or block certain accesses according to the level of risk.
Practical example
A rule may require MFA for administrators and refuse connections from non-compliant devices.
Common issues
- Rule blocking emergency accounts
- too wide
- Report-mode-(s) not analysed
Related terms
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.