Microsoft Conditional Access Step by Step!

In this session I’ll take you on a journey inside Microsoft Conditional Access. From basic features to integrating with Entra ID Identity Protection. You’ll learn all about Conditional Access and more importantly how it works. If you’re planning for a Microsoft exam or simply want to know more then this video is for you.

Timecodes

00:00 Introduction to conditional access and zero trust.
04:21 Entra ID Identity Protection Overview
06:07 Entra ID Conditional Access Portal Overview
07:33 Critical settings to check before you start
09:16 Creating a Entra ID Conditional Access Policy from scratch
14:12 Client App Restrictions
15:04 Dynamic Device Filtering
18:40 Creating a Entra ID Conditional Access policy from a template
19:33 Using the What IF Tool
20:06 Entra ID Conditional Access Reporting
20:55 Session conclusions

[ramsyrama]

Another extremely well simplified but yet powerful video

[sheraazaliinamdar]

Very informative Andy, you gained a new subscriber!

[davidcarrico]

Hi, could you do a video on conditional access and multi factor authentication policies for Guest/B2B users?

[patrick__]

You almost caused me and my dog a heart attack at 10:31 😂 Good video again, thanks for this🎉

[davidcarrico]

Great video. Can I use PowerBI to target the sign-in logs or audit logs to look at the data from a variety of angles not easily seen in the entra UI?

[mark]

Hi Andy, thank you for the video, very informative. During an Access Review, can users decide whether they access to a resource? Thank you so much

[KJA]

Hey, Could you use InTune device compliance policies as another way filter access, for example you have to be signing in from a complaint device to access SharePoint or OWA ? Thanks.. Great Channel... Karl

[MSAdmin]

Hi Andy, thank you for the content, very informative. A question if you could help, please - when we add a trusted location on a Conditional Access policy, how does that work when a user is using a VPN?
For example, a user is overseas and uses a VPN in order to connect to a Remote Desktop back in the office (trusted location). However, we do not want the user to access content (Cloud apps) on her local machine (which is overseas).
Question: As she is connected to our office VPN, will Conditional Access recognise her location as overseas (then block access) or the office (trusted) location?
Hope it is clear! Thank you again!

[moepskie]

Trying to think of a reason why you would set a device filter for a CA policy :-) Could be used to harden security even more I guess? (Like require employees to use a Dell laptop or else they'll get blocked), but seems a bit overkill? Just trying to find a specific situation where this would be amazing for

[davidcarrico]

Again, great video. Another question. When something is set to report only or monitoring mode, my understanding is it’s not enforcing yet, those modes are to give you an idea of the implications of your settings, if that is accurate, where do you then go to see those implications?

[jimmyjose]

Really informative! Does Patreon have labs to get some hands-on experience?

[shoaibawan]

Very Usefull vedios but the only thing i am missing here is The table of content. Like i want you to create a library where i can only find vedios on Intune. Another library with vedios of Azure AD and ETC.

[NagaCharo]

How to setup MFA for guest users b2b, for experience cloud salesforce???