Conditional Access
- Signals: user/group, location, device state, application, sign-in risk, user risk.
- Grant controls: require MFA, compliant device, approved app, password change.
- Session controls: sign-in frequency, persistent browser, app-enforced restrictions.
- Report-only mode: test policies without enforcing; review impact in sign-in logs.
Privileged Access
- PIM: just-in-time activation with approval, time-limited, and audited.
- Access reviews: periodic certification of role assignments.
- Emergency access accounts: break-glass accounts excluded from conditional access.
- Managed identities: system or user-assigned; eliminate credential management.
Practice Entra ID & Conditional Access Questions
Put your knowledge to the test with practice questions.