Mastering Entra Conditional Access

Letting people reach corporate data from any device anywhere is now the default expectation, and it widens the attack surface considerably. Conditional Access is the main lever for controlling that, and most tenants have policies that accumulated rather than got designed.

Ru Campbell (Microsoft MVP and Threatscape's Microsoft Security Practice Lead) works through implementing Conditional Access properly: the baseline protections every tenant should have, then the more advanced patterns suited to mature environments. He's clear about the distinction between what Conditional Access can do and what you should actually be doing with it.

It's short, specific and hands-on. A sensible companion to Threatscape's Entra Black Belt session, which covers the wider platform, and to Notes From The Field, which shows what happens when these controls aren't in place.