Conditional Access:: CA

in plain english

Policy-driven access gates that decide who can sign in, from where, on what device, and under what conditions — applied dynamically based on signals like risk, location, and device health.

official microsoft definition

An Microsoft Entra ID feature that brings together signals (user, location, device, application, risk) into policy decisions to allow, block, or require additional controls (MFA, compliant device) for access.

plans & eligibility

• Microsoft Entra ID P1 (included in M365 E3, F3, Business Premium)
• Risk-based CA requires Entra ID P2

related on aguidetocloud