Planning Conditional Access Policies
With the increase in hybrid and remote work, it is important to ensure that users can securely access organizational resources. Conditional Access policies, part of Azure AD Premium Plans P1 and P2, Enterprise Mobility + Security E3 and E5, and Microsoft 365 F1, E3, and E5, are Microsoft’s recommended tools for providing identity security for Microsoft 365 users.
In this section, you’ll look at planning and configuring Conditional Access to secure identity and resources.
Conditional Access policies can be used to secure both Microsoft 365 workloads as well as applications that are federated with Azure AD. See Figure 6.9:
Figure 6.9 – Conditional Access signals
Conditional Access requires an Azure AD Premium P1 plan for all features, with the exception of risk-based Conditional Access, which requires an Azure AD Premium P2 plan. Administering and configuring Conditional Access requires either...