Conditional Access - How it Works!

[@mshajan]

Thanks Andy for this wonderful video. A great topic often overlooked or underestimated and you have explained it well in less than 25 minutes!

[@AndyMaloneMVP]

You are most welcome delighted you enjoyed it 😊

[@chiang_tzu_hsien]

Thank you for sharing!!!!! Love your teaching style!! You always make hard things easier!!!!! Hope to see more introductions of Office365 E1,E3,E5’s main differences’update♥️

[@AndyMaloneMVP]

You are so welcome!

[@kristerkpkung]

CA i so powerful today. Opens so many opportunities in enhancing the security.

[@AndyMaloneMVP]

Breed it does 😊

[@joshuaeuceda4635]

Thank you Andy, great job, very helpful and important information to secure one's tenant.

[@oumadahmed4625]

Thanks Andy

[@abhinavkumar8396]

Great Job Andy😊.

[@neilgoodman2885]

10-Q. Comments: 1) Music bed should be reduced to a less understandable level. (Too Loud). It should also be bumped down an octave, so it "jingles" less on one's nerves. I mean it is too bright and happy; should flow. 2) Content: should your students be vetted to prevent sleeper cells, as in the 9/11 attack. 3) Lists should be left up longer; or students should be directed to an alternative page for refreshers and note takers. 4) You should publish a syllabus periodically. Respectfully, NHG

[@donaldsimmons6880]

Hi Andy Great video as always! Can you do you a follow up or short video around conditional access using workstation certificates. Every reference I've seen just says "configure custom policy" and no one elaborates on the details.

[@AmitKumar-wq7gv]

Great session Andy.. would request you to share knowledge of Authentication Context integration with conditional access as well

[@AndyMaloneMVP]

No worries 👍

[@randall1701]

very helpfull service, but need to mention that P1 Licence is needed for every user

[@pr1811]

Not only that, if you want to filter on 'risky sign-ins' you'll need a P2 license for each user

[@Semtx552]

hmm @2:14 ADFS "Claim Rules" are part of an application's SSO configuration. Conditional Access replaces ADFS' "Access Control" Policy and CA adds plenty more options to it.

[@AndyMaloneMVP]

I believe that's what I said :-)

[@Semtx552]

​@@AndyMaloneMVP im afraid you didnt, "Claim rules" are on the slides, 2nd bullet point. should be "Access Control". It caught my eyes because im full time working on a conditional access migration while my colleages work on moving away from ADFS to Azure SSO, they work on claim rule issues, i dont :)

[@kabyson]

Thanks. It will be good to describe how it licensed?

[@AndyMaloneMVP]

P1 & P2 licence

[@GavinScrimgeour]

Hello Andy, that’s exactly the info I was after. Also do you do consultancy in the Perth area? You said Stirling office so I’m assuming you are relatively local.

[@AndyMaloneMVP]

I am to a point. however unfortunately I don’t work in the UK I work in the Nordics as well as other various locations. Consulting! I wish I had the time my friend, I’m sorry. I’m delighted that you found my channel though, all the best,

[@prashanthambati7977]

It was wonderful

[@jamesa4958]

Thank you

[@danielgomez966]

Hi Andy, Great video! Can you do an SSPR explanation/demo?

[@AndyMaloneMVP]

Sure, I’ll add it to my list 😊

[@mirabdurrehman2615]

Hi Andy, Is there any way we can skip MFA for users signing in using Hybrid Joined Devices?

[@AndyMaloneMVP]

Not that I know of

[@TheB1nary]

Great video - thank you so much! This will no doubt be a very stupid question, but when setting a CA based on IP address/location, should I use the external IP that the requests will come from, or the internal range of IP addresses? For example, our business has an external IP - and our internal range is separate. If I send an access request to 365, does this come from my internal addresses or the external only? Hope that makes sense. Thanks very much for your help!!

[@AndyMaloneMVP]

There’s no such thing as a stupid question. We’re all learners here my friend. It’s the external IP address that you’re looking to. Add in okay. The more details check out docs.microsoft.com and search for Microsoft 365 conditional access, trusted IP settings

[@TheB1nary]

@@AndyMaloneMVP Late response from me -- but huge thanks for clearing that up for me!!!

[@tyhend88]

Thank you, Andy! I want to get a couple MS certifications. We use AAD and M365 currently. Should I start with the M365 cert or is there a path I should follow? Thank you!!

[@AndyMaloneMVP]

Start with MS-900 and move forward from there.

[@movieswovies]

Nice video Sir. A small request to you - Can you make a complete walkthrough on AZ-140 just like exam prepartion. It would be very helpful. Thanks 😊😊

[@AndyMaloneMVP]

Unfortunately I don't teach that particular class. Too be honest if I started putting full classes up here Microsoft would complain, as would my bank account. I have to make a living somehow :-)

[@movieswovies]

@@AndyMaloneMVP ok no issues 😊 Thanks

[@spryz5950]

Small request to you a complete walkthrough on AZ-140

[@AndyMaloneMVP]

@@spryz5950 unfortunately I don’t teach that course however there are many other KZbin channels offering this course. Good luck and thanks again

[@xinglianpan2593]

Thanks Andy, can i got the PPT files?

[@AndyMaloneMVP]

I'm afraid not here.

[@xinglianpan2593]

@@AndyMaloneMVP Thanks so much!

[@emmanuelchrispher8958]

Good very good

[@neilgoodman2885]

10-Q