I’m proud to announce the February 2021 update of my Conditional Access demystified whitepaper. With this release, we have reached the third iteration of the whitepaper starting with the first one released in August 2019 after writing several blogposts on the subject. In May last year I released the second version containing a lot of updates.

The paper has had a major update, including all information from the blogposts I’ve written about the subject since then. The paper therefore has grown to 77 pages at this point in time, for reference the May 2020 version contained 30 pages.

You can download the paper from my GitHub page here: Conditional Access demystified-v1.2 – February 2021.pdf

In this version I added the following updates:

Workflow cheat sheet

The workflow cheat sheet has been updated to reflect the current status of the Conditional Access policies. With the workflow I want to provide IT pro’s with a handy cheat sheet which they can use while building or troubleshooting conditional access policies. If you print the cheat sheet or display it on a secondary monitor it can be quite handy and I use it all the time. 

The workflow cheat sheet is available seperately for download from my GitHub page here: Conditional Access Workflow – v1.2.pdf

My recommended set of Conditional Access policies

I’ve included my recommended set of conditional access policies. The reasoning behind the policies is described, and I will detail each policy which needs to be created. Also a reference to a spreadsheet is included, containing all the necessary settings in the Conditional Access policy: Conditional Access Policy Description-v1.2.xlsx

See: Conditional Access demystified: My recommended default set of policies for my blogpost on this subject.

Further updates

I also added lots of other information like:

• Functional design of Conditional Access
• Browser restrictions and configuration when using Conditional Access
• Understanding and governing reauthentication settings in Azure Active Directory
• And much more..

I hope you enjoy reading the paper and that it helps you to setup Conditional Access for the tenant(s) you are administering. Feel free to reach out if you have any questions or remarks.