Conditional access
125
MENTIONS
20
EPISODES
9
PODCASTS
Search complete. 125 mentions across 20 episodes found for "Conditional access".
Nov 4, 2026
Jussi RoineHOST
And we sort of got the idea for this episode because most of us now carry work and private life in the same pocket, possibly in the same devices, Outlook teams, AI apps like ChatGPT, Copilot, Cloud, and so on.
Jussi RoineHOST
So we figured this episode is about the boundary between the two, why it perhaps matters for you as a person, and also why it matters for the company that is possibly employing you, and maybe where the Microsoft Stack lets you draw a line properly, work profiles, app protection, tenant restrictions, privileged access workstations, conditional access, and so on.
Jussi RoineHOST
Security definitely is part of the story.
Jussi RoineHOST
But I think this is more about good habits and a good design on how do you sort of segregate and isolate between the private life and the work life and what happens if it bleeds over.
6 MINS LATER
Tobias ZimmergrenHOST
Awesome.
Tobias ZimmergrenHOST
Great.
Tobias ZimmergrenHOST
For some industries, for some customers, with heavy conditional access policies, but also heavy device management policies, it's like, well, you have to enroll your entire phone to be fully enrolled within our engine or device management, this or that way.
Tobias ZimmergrenHOST
And then you're like, well, do I want that? Do I not want that? That's what the work mode does.
Mirko PetersHOST
Token refresh.
Mirko PetersHOST
A conditional access rule that fires more than it should.
Mirko PetersHOST
Each one is a small interruption, and each one has the same shape.
Mirko PetersHOST
A screen appears, a decision is needed.
21 MINS LATER
Mirko PetersHOST
A strength doesn't act on its own.
Mirko PetersHOST
It isn't a switch that turns anything on or off.
Mirko PetersHOST
It attaches to a conditional access policy as a grant control.
Mirko PetersHOST
Where you used to pick require multi-factor authentication, you now pick require authentication strength and choose one from the list.
Mirko PetersHOST
Report only mode and staged rollouts.
Mirko PetersHOST
Conditional access has a setting most people walk past.
Mirko PetersHOST
It sits next to on and off.
Mirko PetersHOST
It's called report only.
Mirko PetersHOST
Plenty of what Secure Score recommends isn't a policy at all.
Mirko PetersHOST
Some of it is architecture, and architecture doesn't have a report-only mode.
Mirko PetersHOST
conditional access without self-inflicted outages here's the failure everyone hears about and a surprising number of people cause anyway an admin builds a new policy require compliant devices all users all apps it looks right it feels like good security they save it switch it to on and within a minute the tenant stops answering nobody can sign in including the admin who just made the change the reasons are boring the scope said all users and nobody removed the admin's own account the device compliance data hadn't synced yet so every laptop looked non-compliant Or the policy applied to a sign in the admin portal itself depends on different cores each time.
Mirko PetersHOST
Same Monday.
Kenneth van SurksumGUEST
Working for a small company in the Netherlands and actually doing a lot of community work as well.
Kenneth van SurksumGUEST
Not sharing Intune baselines, but I do share for example a conditional access baseline, which gives back a lot as well.
Kenneth van SurksumGUEST
So I think we can share that experience, both of us.
Frans OudendorpHOST
Nice.
James RobinsonGUEST
But if it can get you from 0 to 80, maybe 90% in the 30 seconds or something that it takes you to import the policies, then you can spend your time much better elsewhere.
Kenny BuntinxHOST
But it's also a bit of a problem and a hassle.
Kenny BuntinxHOST
And I think Canada also has a lot of work lately with conditional access, completely shifting and adding new stuff.
Kenny BuntinxHOST
You have this...
Kelvin TegelaarGUEST
If you have something a little bit more extreme, like Exchange Manage as app, They could manage all of your exchange settings.
Kelvin TegelaarGUEST
If you have conditional access, they could lock you out of your tenants.
Kelvin TegelaarGUEST
There's a lot around that.
Kelvin TegelaarGUEST
And so if you're an ISV and you're listening right now and you're like, oh crap, we are using client credentials.
15 MINS LATER
Kelvin TegelaarGUEST
The tenant split is super important.
Kelvin TegelaarGUEST
And also, consider all of your tenants as sensitive as possible.
Kelvin TegelaarGUEST
Like, make sure you have very tight conditional access policies.
Kelvin TegelaarGUEST
Merrill recently released a fantastic thing about GSA.
Mirko PetersHOST
A lot of security terms sound alike.
Mirko PetersHOST
Conditional access decides whether a sign-in is allowed right now.
Mirko PetersHOST
It looks at the device, the location, the risk level, the app.
Mirko PetersHOST
Then it says yes, no, or yes, but with MFA.
Mirko PetersHOST
Identity protection watches for risk.
Mirko PetersHOST
A leaked credential, an impossible travel sign-in, a user behaving oddly.
Mirko PetersHOST
It scores that risk and feeds it into conditional access.
Mirko PetersHOST
Governance asks something different.
Steve EndowHOST
But very cool.
Steve EndowHOST
Fatima is finalizing our cybersecurity project to get all of our Entra, Conditional Access, Defender, Intune, BitLocker, laptops, everything consistent, standardized, compliant, and secure.
Steve EndowHOST
And she's also helping to continue to plan the Christmas festival and a couple other things.
Steve EndowHOST
She is also our internal IT, so she does all the laptop repairs because we have had some issues lately.
Steve EndowHOST
And Fatima is wrapping up phase one of our cybersecurity project, and that was design and remediation.
Steve EndowHOST
So now all of our systems will be using Entra, Conditional Access, Intune, Defender, and BitLocker.
Steve EndowHOST
among other things.
Steve EndowHOST
So that is going to be applied consistently throughout the team on all computers.
Steve EndowHOST
Fatima has been making fantastic progress on our cybersecurity project.
Steve EndowHOST
She has gone through all of the configuration and prep, and she is now on the final remediation steps, and that is to implement ENTRA security policies, including conditional access and MFA enforcement and Intune for device enrollment.
Steve EndowHOST
And we have Defender.
Steve EndowHOST
And we also have BitLocker enforcement.
Steve EndowHOST
They are helping me lead this charge.
Steve EndowHOST
So where we have a security project, we have a remediation plan, device inventory, inventory tracker, Entra, Intune, Defender, conditional access, MFA, BitBlocker, you name it, A to Z basic security plan.
Steve EndowHOST
And yeah, so we had as of yesterday or day before 21 days to remediate by the end of September.
Steve EndowHOST
So we are full speed ahead on that.
10 more episodes mention Conditional access.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.