Conditional Access session controls
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 9607a86 · +9 −1 lines · also on GitHub
⋯ 29 unchanged lines
3030
3131
## Conditional Access application control
3232
33
−Conditional Access App Control uses a reverse proxy architecture and is uniquely integrated with Microsoft Entra Conditional Access. Microsoft Entra Conditional Access allows you to enforce access controls on your organization’s apps based on certain conditions. The conditions define what user or group of users, cloud apps, and locations and networks a Conditional Access policy applies to. After you determine the conditions, you can route users to [Microsoft Defender for Cloud Apps](/defender-cloud-apps/what-is-defender-for-cloud-apps) where you can protect data with Conditional Access App Control by applying access and session controls.
33
+Conditional Access App Control uses a reverse proxy architecture and is uniquely integrated with Microsoft Entra Conditional Access. Microsoft Entra Conditional Access allows you to enforce access controls on your organization’s apps based on certain conditions. The conditions define what user or group of users, cloud apps, and locations and networks a Conditional Access policy applies to. After you determine the conditions, you can route users to where access and session controls apply.
3434
35
+### Microsoft Defender for Cloud Apps
36
+[Microsoft Defender for Cloud Apps](/defender-cloud-apps/what-is-defender-for-cloud-apps) is where you can protect data with Conditional Access App Control by applying access and session controls.
37
+
3538
Conditional Access App Control enables user app access and sessions to be monitored and controlled in real time based on access and session policies. Access and session policies are used within the Defender for Cloud Apps portal to refine filters and set actions to take. With the access and session policies, you can:
3639
3740
- Prevent data exfiltration: You can block the download, cut, copy, and print of sensitive documents on, for example, unmanaged devices.
⋯ 4 unchanged lines
4245
- Block custom activities: Some apps have unique scenarios that carry risk, for example, sending messages with sensitive content in apps like Microsoft Teams or Slack. In these kinds of scenarios, you can scan messages for sensitive content and block them in real time.
4346
4447
For more information, see the article [Deploy Conditional Access App Control for featured apps](/defender-cloud-apps/proxy-deployment-aad).
48
+
49
+### Microsoft Purview Data Loss Prevention
50
+[Microsoft Purview Data Loss Prevention](/purview/dlp-browser-dlp-learn), is where you can [help prevent users from sharing sensitive info with Cloud Apps in Edge for Business](/purview/dlp-create-policy-prevent-cloud-sharing-from-edge-biz). Conditional Access session controls with the **Custom** setting selected are required for apps included in these policies.
51
+
52
+For information on the capabilities available in Purview DLP to protect data sharing to cloud apps in the browser, please see [activities you can monitor and take action on in the browser for managed apps](purview/dlp-browser-dlp-learn#activities-you-can-monitor-and-take-action-on)
4553
4654
## Sign-in frequency
4755
⋯ 48 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 07:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.