


Usually that takes the form of multi-factor authentication (MFA) - requiring the user to supply a code sent to their mobile device, a fingerprint or some other additional authentication factor. To reduce these risks, organizations can put additional authentication hurdles in place. But sometimes, it’s an attacker who has stolen or guessed a user’s credentials, and now they’re merrily romping around your network, and your organization is at risk of ending up in the data breach headlines or being slapped with an enormous compliance fine.

Most of the time, it’s the legitimate account owner typing them in and everything’s fine - the user can go on to access all the data, applications and other resources they’ve been granted permissions for. By creating Conditional Access policies, you can fine-tune your authentication process - without unduly burdening users.Ĭonsider how the authentication process has traditionally worked: Organizations require users to supply a user ID and password. What is Conditional Access?Ĭonditional Access is a feature of Azure AD that helps organizations improve security and compliance. Have questions about Microsoft Azure AD Conditional Access? You’re in luck! Today, I’m going to lay out all the key things you need know.
