Conditional Access App Control
Conditional Access App Control is an incredibly powerful tool when it comes to protecting data for your organization. It lets you monitor access and retrieve information in real time to help protect against data leaks and potential breaches. Let's take, for example, the policy we created earlier in this chapter when we talked about protecting sensitive data.
We started creating a policy that could be used to block sensitive data from being downloaded and inspected that it matched DLP-protected data, such as documents that have been classified as confidential because they contain personal customer data.
The following screenshot shows our starting point; that is, Azure Active Directory > Security > Conditional Access. In this example, we're creating a policy that's targeting a test user, which is targeting Office 365, and then specifying Use Conditional Access App Control to leverage the MDCA reverse proxy backend:
