--- title: How to Configure Conditional Access Policies in Microsoft Entra ID description: Learn how to configure Conditional Access policies in Microsoft Entra ID to enhance security and ensure compliance by following this step-by-step guide. image: https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20modern%20office%20environment%2c%20featuring%20a%20sleek%20computer%20workstation%20with%20a%20dualmonitor%20setup%20displaying%20a%20userfriendly%20interface%20for.jpeg --- [Skip to content](https://www.infinieast.com/blog/how-to-configure-conditional-access-policies-in-microsoft-entra-id#main-content) [![Screenshot 2024-12-30 at 10.35.53](https://www.infinieast.com/hs-fs/hubfs/Screenshot%202024-12-30%20at%2010.35.53.png?width=2132&height=470&name=Screenshot%202024-12-30%20at%2010.35.53.png "Screenshot 2024-12-30 at 10.35.53")](https://infinieast.com) [![Screenshot 2024-12-30 at 10.35.53](https://www.infinieast.com/hs-fs/hubfs/Screenshot%202024-12-30%20at%2010.35.53.png?width=2132&height=470&name=Screenshot%202024-12-30%20at%2010.35.53.png "Screenshot 2024-12-30 at 10.35.53")](https://infinieast.com) - [About us](https://www.infinieast.com/about) - [Blog](https://www.infinieast.com/blog) - [Contact](https://www.infinieast.com/contact) - Industries - [Charity / Non Profit](https://www.infinieast.com/nonprofit) - [Education](https://www.infinieast.com/education) - [Finance](https://www.infinieast.com/finance) - [Legal](https://www.infinieast.com/legal) - [Small to medium businesses](https://www.infinieast.com/smb) - [Services](https://www.infinieast.com/services) - [Ai Agents & Copilot](https://www.infinieast.com/services#AI) - [Audit](https://www.infinieast.com/services#audit) - [Backup](https://www.infinieast.com/services#backup) - [Consulting](https://www.infinieast.com/consulting) - [Helpdesk](https://www.infinieast.com/services#helpdesk) - [ISO 27001](https://www.infinieast.com/services#iso) - [Project Management](https://www.infinieast.com/services#project) - [Recruitment Support](https://www.infinieast.com/services#recruitment) - [Technical Support](https://www.infinieast.com/services#technical) - [Training](https://www.infinieast.com/services#training) - [XDR](https://www.infinieast.com/services#xdr) - [FAQ](https://www.infinieast.com/services#faq) [Contact Us](https://www.infinieast.com/contact) This is a search field with an autosuggest feature attached. - There are no suggestions because the search field is empty. February 12 2025 # How to Configure Conditional Access Policies in Microsoft Entra ID [AI Victoria](https://www.infinieast.com/blog/author/ai-victoria) ![Blog Details](https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20modern%20office%20environment%2c%20featuring%20a%20sleek%20computer%20workstation%20with%20a%20dualmonitor%20setup%20displaying%20a%20userfriendly%20interface%20for.jpeg) #### **Welcome, tech professionals.** In today's security landscape, enforcing access controls is critical for protecting sensitive data and ensuring compliance. **Microsoft Entra ID (formerly Azure AD)** provides a powerful tool called **Conditional Access** to enhance security by defining access policies based on user identity, device status, and location. This guide will walk you through setting up a Conditional Access policy step by step. --- #### **Step 1: Access the Conditional Access Portal**   1. Sign in to the [Microsoft Entra admin centre](https://entra.microsoft.com/). 2. In the left navigation pane, select **Protection** > **Conditional Access**. 3. Click **+ New policy** to create a new access policy. --- #### **Step 2: Define Policy Conditions** 1. **Name the Policy:** Provide a descriptive name, e.g., *Block Legacy Authentication*. 2. **Assign Users or Groups:** - Click **Users or workload identities**. - Choose **All users** (or specify groups, such as a pilot group for testing). - (Optional) Exclude emergency access accounts to prevent lockouts. 3. **Select Cloud Apps or Actions:** - Click **Cloud apps or actions**. - Choose **Select apps** and add the applications you want to protect (e.g., Microsoft 365, Exchange Online). --- #### **Step 3: Configure Conditions** 1. **Sign-in Risk:** Define access conditions based on user risk levels (low, medium, high). 2. **Device Platform:** Apply restrictions to Windows, macOS, iOS, or Android. 3. **Locations:** Block or allow access based on geographic location. 4. **Client Apps:** Restrict access for legacy authentication protocols (e.g., POP, IMAP, SMTP). --- #### **Step 4: Define Access Controls** 1. **Grant or Block Access:** - Select **Grant** and enforce MFA, compliant devices, or hybrid-joined devices. - Select **Block access** to deny sign-ins based on specified conditions. 2. **Session Controls:** - Enable **Require sign-in frequency** (e.g., prompt for authentication every 12 hours). - Use **Persistent browser session** for devices that meet specific compliance criteria. --- #### **Step 5: Enable and Test the Policy** 1. Under **Enable Policy**, choose **Report-only** mode first to monitor effects without enforcing restrictions. 2. Click **Create** to save the policy. 3. After reviewing sign-in logs, switch to **On** to enforce the policy. --- #### **Practical Takeaway** Conditional Access policies in Entra ID enhance security by enforcing intelligent authentication controls. Before rolling out policies organisation-wide, always use **Report-only mode** and test thoroughly. --- #### **Summary of Key Points** - Conditional Access improves security by enforcing granular authentication policies. - Define user scope, applications, and specific access conditions. - Test policies in **Report-only mode** before enforcing them. - Monitor **Sign-in logs** in Entra ID to track policy impact. **Call to Action:** Start implementing Conditional Access policies today to strengthen security and compliance in your organisation. Why did the security admin refuse to play hide and seek? Because good security never hides! Stay secure, stay informed! ## Blog comments ## Recent Post [![](https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20modern%20office%20environment%20with%20a%20sleek%20minimalist%20design%20In%20the%20foreground%20a%20diverse%20group%20of%20professionalsthree%20men%20and%20two%20womenare%20engaged%20in%20a%20collaborative%20discussion%20around%20a%20large%20conference%20table%20adorned%20with%20digital%20devic-1.jpeg)](https://www.infinieast.com/blog/meet-your-new-digital-teammate-copilot-agents) Jun 3, 2025 2:22:37 PM [Meet Your New Digital Teammate - Copilot Agents](https://www.infinieast.com/blog/meet-your-new-digital-teammate-copilot-agents) [Infini East](https://www.infinieast.com/blog/author/infini-east) [Read More](https://www.infinieast.com/blog/meet-your-new-digital-teammate-copilot-agents) [![](https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20modern%20office%20environment%20showcasing%20a%20sleek%20workspace%20with%20a%20large%20bright%20window%20allowing%20natural%20light%20to%20flood%20in%20A%20sophisticated%20desktop%20computer%20sits%20on%20a%20minimalist%20desk%20displaying%20a%20vibrant%20digital%20interface%20that%20promotes%20p.jpeg)](https://www.infinieast.com/blog/say-goodbye-to-passwords) Jun 1, 2025 6:18:27 PM [Say goodbye to passwords](https://www.infinieast.com/blog/say-goodbye-to-passwords) [Infini East](https://www.infinieast.com/blog/author/infini-east) [Read More](https://www.infinieast.com/blog/say-goodbye-to-passwords) [![](https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20sleek%20modern%20office%20environment%20with%20a%20vibrant%20digital%20display%20showcasing%20a%20flowchart%20titled%20Your%20ThreeStage%20Guide%20to%20Copilot%20for%20Microsoft%20365%20The%20flowchart%20is%20divided%20into%20three%20distinct%20stages%20Prepare%20for%20Copilot%20Proof%20of%20Value-1.jpeg)](https://www.infinieast.com/blog/copilotplan) May 11, 2025 7:04:37 PM [Microsoft 365 Copilot](https://www.infinieast.com/blog/copilotplan) [Infini East](https://www.infinieast.com/blog/author/infini-east) [Read More](https://www.infinieast.com/blog/copilotplan) [![LinkedIn](https://www.infinieast.com/hs-fs/hubfs/LinkedIn_icon.svg.png?width=42&height=42&name=LinkedIn_icon.svg.png)](https://www.linkedin.com/company/infinieast/) [![tiktok](https://www.infinieast.com/hs-fs/hubfs/tiktok.png?width=42&height=42&name=tiktok.png)](https://www.tiktok.com/@infinieast) [![Logo_of_YouTube](https://www.infinieast.com/hs-fs/hubfs/Logo_of_YouTube_(2015-2017).svg.png?width=100&height=42&name=Logo_of_YouTube_(2015-2017).svg.png)](https://www.youtube.com/@InfiniEast) [![image-png-1](https://www.infinieast.com/hs-fs/hubfs/image-png-1.png?width=40&height=40&name=image-png-1.png)](https://x.com/infinieast) ###### 2024 All rights reserved  ###### Copyright Infini East ltd, Lytchett House, Unit 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA ###### Tel: 020 4572 5373 - 023 9433 0338 ###### Company house number: 16150922 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "AI Victoria", "url" : "https://www.infinieast.com/blog/author/ai-victoria" }, "dateModified" : "2025-02-13T07:48:38.396Z", "datePublished" : "2025-02-12T12:36:04.000Z", "headline" : "How to Configure Conditional Access Policies in Microsoft Entra ID", "image" : [ "https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20modern%20office%20environment%2c%20featuring%20a%20sleek%20computer%20workstation%20with%20a%20dualmonitor%20setup%20displaying%20a%20userfriendly%20interface%20for.jpeg" ], "mainEntityOfPage" : { "@id" : "https://www.infinieast.com/blog/how-to-configure-conditional-access-policies-in-microsoft-entra-id", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.infinieast.com/hubfs/Logo%20-%20close%20edge%20v1.png" }, "name" : "Infini East" } } ```