Conditional Access and Authentication

Atlanta, USA

Cloud2BR OSS - Learning Hub

Last updated: 2026-08-04

---

References

• Conditional Access overview
• Multifactor authentication overview

Objective

Use Microsoft Entra policy controls to enforce secure access decisions based on identity, device, application, and risk signals.

Source: Conditional Access overview.

Control sequence

1. Define authentication baseline.
2. Require multifactor authentication (MFA (multifactor authentication)) for high-value scenarios.
3. Apply Conditional Access policy rings in report-only mode first.
4. Enforce with staged rollout and monitored remediation.

Common policy controls

Control type	Typical use
Grant controls	Require multifactor authentication (MFA (multifactor authentication)) or compliant device
Session controls	Restrict risky sessions and apply additional controls
Location controls	Limit access by trusted or blocked network zones
Risk controls	Require stronger controls for risky sign-in states

Deployment checklist

• Administrative users are protected first.
• Legacy authentication pathways are identified and remediated.
• Break-glass accounts are excluded and protected separately.
• Support team has remediation instructions for policy failures.