security default and conditionnal access

Question

hello,

if i configuring conditional access in Entra, enough to avoid forced activation of default security settings by Microsoft?

thanks for your help

Answer 1

Hi @Administrateur briacé

Thank you for posting your query on Q&A.
To answer your question yes, if you have configuring conditional access in Entra ID, The default security settings will be turned off and apply your conditional access.
If you have already configured conditional access in Entra ID, the Security defaults will not be turned on.

I hope this answer helps! If you have any further questions, please feel free to ask.

Reference: https://learn.microsoft.com/en-us/microsoft-365/business-premium/m365bp-turn-on-mfa?view=o365-worldwide&tabs=secdefaults
https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults

Thanks,
Akhilesh.
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hi there,

I would politely suggest that if you are asking this question, you should not enable Conditional Access.

If you have a good reason to use Conditional Access, and you've tested your requirements in a test Azure Tenant, then it might make sense to use Conditional Access.

The security defaults are in place as the minimum recommendations set by Microsoft.

When you enable conditional access you are overriding those security defaults which could make your tenant more insecure.

Here are some references on this topic:

https://cloudtech.nu/2020/02/29/when-to-use-security-defaults-or-conditional-access/

(yes this is an old article but it provides a good explanation)

https://samcogan.com/wth-are-azure-ad-security-defaults/

https://www.youtube.com/watch?v=VNFYPVY0uZE

https://www.zdnet.com/article/microsoft-were-rolling-out-these-security-settings-to-protect-millions-of-accounts-heres-whats-changing/

https://www.alitajran.com/disable-security-defaults/

Answer 3

hi,

thanks for your answer, I will work more calmly on putting security defaults into production.

best regards