// topics

Conditional Access

Conditional Access is where Entra decides who gets in, from where and on what. These guides cover designing, testing and troubleshooting policies.

Start here

Rolling out "require compliant device" without a flood of tickets
Requiring a compliant device is one of the strongest Conditional Access controls you can apply. It's also one of the easiest to get wrong.
Named locations: getting IP ranges and countries right in Conditional Access
Named locations look simple, but trusted IPs and country blocks are easy to get subtly wrong. What they can and can't do, and how to use them well.
Authentication strengths: requiring the right kind of MFA
Requiring MFA treats an SMS code and a passkey as equals. Authentication strengths let you say which methods are good enough for which resources.