Conditional Access
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 84b349b · +4 −5 lines · also on GitHub
⋯ 27 unchanged lines
2828
Use Conditional Access policies to apply the right access controls when needed to keep your organization secure.
2929
3030
> [!IMPORTANT]
31
−> Conditional Access policies are enforced after first-factor authentication is completed. Conditional Access isn't intended to be an organization's first line of defense for scenarios like denial-of-service (DoS) attacks, but it can use signals from these events to determine access.
31
+> Conditional Access policies are enforced after first-factor authentication is completed. Conditional Access isn't intended to be an organization's frontline of defense for scenarios like denial-of-service (DoS) attacks, but it can use signals from these events to determine access.
3232
3333
## Common signals
3434
⋯ 20 unchanged lines
5555
5656
## Common decisions
5757
58
−- Block access.
59
− - This is the most restrictive decision.
58
+- Block access is the most restrictive decision.
6059
- Grant access.
6160
- A less restrictive decision that might require one or more of the following options:
6261
- Require multifactor authentication.
⋯ 45 unchanged lines
108107
109108
Customers with [Microsoft 365 Business Premium licenses](/office365/servicedescriptions/office-365-service-descriptions-technet-library) can also use Conditional Access features.
110109
111
−Other products and features that interact with Conditional Access policies require appropriate licensing for those products and features. This includes Microsoft Entra Workload ID, Microsoft Entra ID Protection, and features like Microsoft Purview.
110
+Other products and features that interact with Conditional Access policies require appropriate licensing for those products and features. This includes Microsoft Entra Workload ID, Microsoft Entra ID Protection, and Microsoft Purview.
112111
113
−When the licenses required for Conditional Access expire, policies aren't automatically disabled or deleted. This lets customers migrate away from Conditional Access policies without a sudden change in their security posture. You can view and delete remaining policies, but you can't update them.
112
+When the licenses required for Conditional Access expire, policies aren't automatically disabled or deleted. This graceful state lets customers migrate away from Conditional Access policies without a sudden change in their security posture. You can view and delete remaining policies, but you can't update them.
114113
115114
[Security defaults](~/fundamentals/security-defaults.md) help protect against identity-related attacks and are available for all customers.
116115
⋯ 5 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:04 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.