Use the Report Only feature to test Conditional Access policies - Microsoft Entra ID

Conditional Access is a capability of Microsoft Entra ID (Entra ID) that enables you to control how authorized users access your cloud apps. How do you know what to expect from the Conditional Access policies in your environment? To answer this question, you can use the Conditional Access What If tool. Learn how to use the Report Only feature to test conditional access policies.

0:00 - Intro
0:19 - What is the Report Only feature?
0:45 - Creating a Report Only policy
1:20 - Finding and reviewing sign-ins where Report Only Conditional Access policies were applied
2:36 - Outro

#microsoftsecurity #ConditionalAccess #AzureAD

[tacom]

So why is it not possible to filter by [Report-only] condition in the Sign-ins view? e.g. I want to see enmass what Users have been affected by the said report-only policy.

[RafaelVarelaPet]

Having to open an event and look for the report-only pane is not practical in many situations.

It would be very useful that you can filter the sign-in logs with using the policy name or the "report only" action as a criteria. For example, that the "conditional access filter includes a "report only" option.

[filijavilija]

Didnt work i tried and the report is blank?