The feature is all about risk detection and remediation. Users who access Onedrive for Business on their iOS or Android device must use the (protected) Onedrive app.Īzure AD Identity Protection is also a premium feature in Azure Active Directory but requires a Premium P2 license.When users access SharePoint Online from an untrusted device, they cannot download or upload documents.Users in the sales team can not access the CRM application unless they are using a managed device.To access Exchange Online from an unmanaged device, all users have to perform MFA.Also, Conditional Access integrates with many other security features such as Microsoft Defender ATP, Intune (App Protection), and Cloud App Security. There are a lot of signals and conditions that can be used. You can deploy if-this-than-that statements to determine who has access to resources and under what conditions. I often call it: ” the firewall of the cloud”. It can be used to protect your Office 365 and Azure AD resources. What is Conditional Access?Ĭonditional Access is a feature in Azure Active Directory and requires a Premium P1 license. To understand why this integration is such a big deal, let’s first take a look at those two features individually.

Microsoft released the user risk integration with Conditional Access last week, so for me, it seemed the perfect occasion to write a blog about this.

(neither my last) In previous blogs, I covered the sign-in risk and user risk policies as part of the Secure Score Series, and in my blog, about Azure Multifactor Authentication I talked about Azure AD Identity Protection, and how it can be used to roll out MFA in your organization. This is not my first article on this subject. This blog is about Azure AD Identity Protection and Conditional Access, and how these two features are working together.

Risky sign in azure ad