Conditional Access
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 4994b15 · +4 −2 lines · also on GitHub
⋯ 1 unchanged line
22
title: "Microsoft Entra Conditional Access: Zero Trust Policy Engine"
33
description: Explore Microsoft Entra Conditional Access, the Zero Trust policy engine that integrates signals to secure access to resources.
44
ms.topic: overview
5
−ms.date: 03/24/2026
5
+ms.date: 04/27/2026
66
ms.reviewer: kvenkit
77
---
88
# What is Conditional Access?
⋯ 93 unchanged lines
102102
103103
Customers with [Microsoft 365 Business Premium licenses](/office365/servicedescriptions/office-365-service-descriptions-technet-library) can also use Conditional Access features.
104104
105
−Other products and features that interact with Conditional Access policies require appropriate licensing for those products and features, including Microsoft Entra Workload ID, Microsoft Entra ID Protection, and Microsoft Purview.
105
+Risk-based Conditional Access policies (sign-in risk and user risk) require [Microsoft Entra ID Protection](~/id-protection/overview-identity-protection.md), which is a Microsoft Entra ID P2 feature. For details, see [Microsoft Entra licensing](~/fundamentals/licensing.md).
106
+
107
+Other products and features that interact with Conditional Access policies require appropriate licensing for those products and features, including Microsoft Entra Workload ID, Microsoft Entra ID Protection, Microsoft Intune, and Microsoft Purview.
106108
107109
When the licenses required for Conditional Access expire, policies aren't automatically disabled or deleted. This graceful state lets customers migrate away from Conditional Access policies without a sudden change in their security posture. You can view and delete remaining policies, but you can't update them.
108110
⋯ 7 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 05:49 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.