Describe Azure conditional access
Allows to deny or accept access to resources. This is based on who the use ris, where the user is and what device is used;
As MS says, it helps IT administrators to
- Empower users to work from anywhere
- Protect data and applications
I can also set it up, that when I am in the office, it should not ask for MFA, but when I am outside the office, it should ask for MFA.
Flowpicture from MS
When can it be used?
- MFA is required: When I am outside the office or Admin require MFA, normal users not
- Require access to services inly through approved client applications
- Require the usage of managed devices -> You have to use the company provided laptop to be able to access the resources
- Blocking of untrusted soruces -> unknown or unexpected locations