Implementing conditional access policies
Conditional access is an Azure AD feature that protects applications by requiring certain criteria (beyond identity authentication) to be met before access is granted. What exactly does this mean? For us to understand how conditional access works, let's review how normal application access works with Azure AD and then compare the process to how it works when we implement conditional access:
Figure 4.25 – Normal application access (without conditional access)
Figure 4.25 illustrates the normal application access flow (without conditional access):
- Step 1: A user accesses an application that uses Azure AD as its identity provider.
- Steps 2 and 3: The user's client is redirected to Azure AD, which validates the first factor of authentication – the user's password. If MFA is required, MFA will also be verified.
- Steps 4 and 5: Following successful verification, the user&apos...
