Microsoft 365 Conditional Access allows users to sign into online services securely if they meet certain conditions. An example would be if someone is working in the office they may not need to use Multi-Factor Authentication (MFA) to sign in, however if they were working from home then MFA would be required to gain access. Conditional access can also be used to block unauthorised sign ins, e.g. if a user doesn't have MFA enabled then the user would be prevented from logging in. Ultimately Conditional Access is designed to control how your organisation's Microsoft 365 data is accessed. 


A diagram of how Conditional Access works is shown below. The diagram shows that using a signal method, a user can verify their identity to gain access to the resources they need.



Conditional Access is included in the following plans: 


  • Azure Active Directory P1
  • Enterprise Mobility and Security (EMS) Plans
  • Microsoft 365 Business Premium

For more information including licensing costs please contact Lineal. 


Additional technical information can be found below:https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview