Conditional Access

Concept

A policy engine in Microsoft Entra that decides at sign-in whether to allow, block or require extra steps, based on signals such as user, device compliance, location and risk. It is the core of a Zero Trust approach in Microsoft 365.

Glossary

Related topics in brief

• Microsoft Entra ID · Part of · Product
  Microsoft's cloud identity and access management service, formerly Azure Active Directory. It handles sign-in, single sign-on, multifactor authentication, Conditional Access and app registrations for Microsoft 365, Azure and thousands of other apps.
• Zero Trust · Related to · Concept
  A security model built on three principles: verify explicitly, use least-privilege access and assume breach. Instead of trusting anything inside the network, every request is checked against identity, device and context.
• Multifactor authentication (MFA) · Related to · Concept
  A sign-in method that requires at least two proofs of identity, for example a password plus a code or approval in an authenticator app. It blocks the vast majority of account-takeover attempts caused by stolen passwords.
• Microsoft Entra Agent ID · Related to · Product
  Identity type in Microsoft Entra for AI agents, so agents get their own identity, permissions and lifecycle instead of borrowing a user's or app's credentials.

Experts and companies for this topic

Nobody has listed this topic yet. Add it to your profile.