Conditional Access
Conditional Access is the tool used by AAD to bring signals together, make decisions, and enforce organizational policies. It is at the heart of the new identity-driven control plane.
Figure 13.14 – Conditional Access
Administrators must have two primary goals:
- Empower users to be productive wherever and whenever.
- Protect the organization's assets.
You can apply the right access controls when needed to keep your organization secure and stay out of your users' way when not needed with the help of Conditional Access policies.
Figure 13.15 – Conditional Access workflow
Next, we will look at user and group scoping in a Conditional Access policy.
Users and groups
Conditional Access allows you to control user access based on user and group assignments. The creation of a Conditional Access policy starts with filtering based on the following conditions:
- None
- All...
