Unit 1: Introduction to Conditional Access

Conditional Access provides fine-grained control over access to resources. Instead of asking only “Who is the user?”, it asks smarter questions.

Conditional Access evaluates:

• Who the user is.
• Which application is being accessed.
• Which device is being used.
• Where the user is signing in from.
• How risky the sign-in looks.

Simple Example

A finance employee signs in to Microsoft 365 from:

• A company laptop in the office → No MFA required.
• A personal phone from another country → MFA required or access blocked.

Conditional Access enables security without annoying users unnecessarily.