Conditional Access

Conditional access policies enforce access decisions based on signals such as user identity, device compliance, location, IP address, and application sensitivity. If conditions are met (e.g., managed device, known location), access is granted; if not, the system may require MFA, block access, or limit capabilities.

Microsoft Entra ID and Okta Adaptive MFA implement conditional access as a core zero trust control.