Conditional Access | Policies for terms of use

Question

Conditional Access | Policies for terms of use

Danissimode 40

Can you tell me how to set up conditional access, displaying the terms of use when the user first logs in to a devices? Entra id joined is produced by administrators after being transferred to the user to whom this device is assigned. This is the first time he's logged into the device, and at this point, I want him to be prompted to read the terms and conditions. How do I set up this scenario?
user action for MFA only(( User's image

Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-11-10T22:14:18.55+00:00

Hi @Danissimode ,

If you want the terms of use to be displayed just when the user first logs in, you can set up a conditional access policy and select Require terms of use in the Condition under Access controls > Grant > Require terms of use acceptance checkbox.

Once you have set up this policy, a user will be prompted to accept the terms of use policy when they first log in to the device. If you have set the policy to require users to accept the terms of use policy on every device they're accessing from, they will be prompted to accept the policy again if they log in from a different device.

You can also set the terms of use policy consents to expire on a schedule by setting Expire consents to On. https://learn.microsoft.com/en-us/entra/identity/conditional-access/terms-of-use#per-device-terms-of-use

Let me know if this helps and if you face any issues.

If the information helped you, please Accept the answer. This will help us and improve searchability for others in the community who may be researching similar questions.
Danissimode 40 Reputation points

2023-11-13T10:52:41.32+00:00

Please describe in more detail. Which action should I choose in Target Recources? at conditions? At Grands?
I went through the options and couldn't find the right one
Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-11-17T01:01:22.39+00:00

The target resource would be for any cloud app or authentication context where you would want this to apply. https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-cloud-apps

https://learn.microsoft.com/en-us/entra/identity/conditional-access/require-tou

Your answer

Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-11-10T22:14:18.55+00:00

Hi @Danissimode ,

If you want the terms of use to be displayed just when the user first logs in, you can set up a conditional access policy and select Require terms of use in the Condition under Access controls > Grant > Require terms of use acceptance checkbox.

Once you have set up this policy, a user will be prompted to accept the terms of use policy when they first log in to the device. If you have set the policy to require users to accept the terms of use policy on every device they're accessing from, they will be prompted to accept the policy again if they log in from a different device.

You can also set the terms of use policy consents to expire on a schedule by setting Expire consents to On. https://learn.microsoft.com/en-us/entra/identity/conditional-access/terms-of-use#per-device-terms-of-use

Let me know if this helps and if you face any issues.

If the information helped you, please Accept the answer. This will help us and improve searchability for others in the community who may be researching similar questions.
Danissimode 40 Reputation points

2023-11-13T10:52:41.32+00:00

Please describe in more detail. Which action should I choose in Target Recources? at conditions? At Grands?
I went through the options and couldn't find the right one
Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-11-17T01:01:22.39+00:00

The target resource would be for any cloud app or authentication context where you would want this to apply. https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-cloud-apps

https://learn.microsoft.com/en-us/entra/identity/conditional-access/require-tou

Share via

Conditional Access | Policies for terms of use

Your answer