Microsoft Entra conditional access

Conditional access is the tool used by Microsoft Entra ID to bring together signals, make decisions, and enforce organizational policies. Help keep your organization secure using conditional access policies only when needed. This security policy enforcement engine analyzes real-time signals to make security enforcement decisions at critical checkpoints. The left side of the diagram represents how signals from users, devices, locations, apps, data labels, and risk analysis are aggregated; decisions are enforced based on the aggregated signals. The middle of the diagram shows common decisions based on signals, including block, limit, allow access, or require additional steps (such as multifactor authentication or password reset). The right side of the diagram represents how a decision is enforced on apps and data once conditional access determines the appropriate action.