Summary

In this chapter, you were introduced to Conditional Access policies in Azure AD. You learned how Conditional Access helps you address traditional security requirements with a modern approach; instead of configuring a firewall (which is not possible in a Microsoft 365 environment), you can configure policies in Azure AD and Microsoft Intune to provide additional protection for users and resources. You also learned how to create a simple Conditional Access policy as well as app-based and device-based policies integrated with Microsoft Intune. In addition, you explored how to utilize the Azure AD Sign-ins page to track successful, failed, and unapplied Conditional Access policy events.

Note

Azure AD Conditional Access also integrates with Azure AD Identity Protection and Microsoft Defender for Cloud Apps. These topics will be covered in later chapters of this book.

The next chapter will show you how role assignment and privileged identities can be used in Azure AD to...