What is the purpose of conditional access (Conditional Access) from Microsoft?
TheConditional Access is a set of policies and configurations that control which registered and compliant devices have access to various services and data sources. In the Microsoft environment, conditional access works with the Office 365 , as well as with theSaaS applications configured in Azure Active Directory.
Why do we need conditional access?
With the shift in IT toward a model more focused on the cloud, it has become difficult to control access to the documents and data that a company relies on to manage its operations. Previously, all IT teams had to do was keep content behind the company’s firewall. As a result, access was controlled by the network owner. Furthermore, the computers on the network were always owned and controlled by the company. In the current model, devices may belong to the company, the user, or a third party (such as vendors and partners).
How conditional access works
Conditional Access based on Azure AD is based on signals from the AD enterprise or Microsoft Intune to inform the system of the device’s status and reliability before it can access data. For mobile devices (iOS, Android, Windows) must be enrolled in Intune, which provides security policy settings and verifies that the device is not rooted or jailbroken. As for PCs Windows, they must be joined to the AD , where policies and governance are enforced.
If a user's device is not compliant with these policies, a conditional access will guide the user on how to make the device compliant so that access to the requested data can be enabled. This guide is designed to allow the user to self-provision, so that no technical support calls or IT intervention is required.
Please note that conditional access is availableonly for devicesrunningWindows 10. Therefore, conditional access for devices running iOS or Android is supported only with Microsoft Intune.
Your posts haven't been migrated to Windows 10 yet?
It's not too late to do things right; we suggest you use the solution System Center Configuration Manager (SCCM) for a consistent and controlled deployment of your workstations Windows 7 and 8 to Windows 10. Please feel free to contact us if you’d like assistance with this task.
Previously, conditional access was configured in the Microsoft portal Intune. With the transition of the service Intune to the portal Azure. Conditional access for SaaS applications (including Office 365) is managed byAzure Active Directorydirectly. However , conditional access for an infrastructure Exchange On-Premises is still handled via Microsoft Intune.
Please note that conditional access for SaaS (O365) applications requires aAzure Active Directory Premium license.
What an article Can't Know
An article describes what applies to everyone. What varies from one organization to another is the inventory: which applications, which accounts, and which pieces of equipment are actually involved in your organization. The inventory determines the scope of the effort, and it cannot be summarized on a single page.
You'll be speaking directly with the engineers who will be doing the work, not with a middleman. We'll respond within 24 business hours.
Check what is still true
Announced dates are sometimes postponed, products are renamed, and conditions change. The blog tracks these topics over time: when a rule changes, a new post announces it.
Search for a topic in the blogIn the same issue
Three articles on the same topic. The blog has 136 articles, all of which are freely available.