What is conditional access?

Conditional access applies identity rules using factors such as user, device, location, and risk.

Answer

Conditional access policies can require MFA, block outdated authentication, limit access from unmanaged devices, or respond to detected sign-in risk. Policies should be designed and tested carefully, with emergency administrative access protected separately, to avoid accidentally locking out legitimate users.