azure ad conditional access

Question

azure ad conditional access

testuser7 286

Hello,

I have one basic question around Conditional Access Policies.

As we know , Azure AD CA-Policies help us undergo the additional factors while any client-app is requesting token for any CLOUD RESOURCE

I have a client-app which is just preparing OAuth request with SCOPE=OpenID and redirecting user to AAD to collect the token.

If AAD-admin wants to make sure that such request must undergo MFA or TOU or any other CA-policy grant, which minimal set of CLOUD RESOURCE should be added in that CA-policy ??

Thanks

testuser7 286 Reputation points

2022-04-26T12:34:55.327+00:00

Hi @AmanpreetSingh-MSFT

I have opened one thread at https://learn.microsoft.com/en-us/answers/questions/825145/azure-ad-conditional-access-2.html to discuss about AAD Conditional Policy.
Would you please look into it and help me.

Thanks.
testuser7 286 Reputation points

2022-04-27T15:51:59.993+00:00

hello team,

Any update on my above query ?
As usually MSFT folks are very prompt answering, looks like my concern is either too foolish OR too SPOT ON and not yet addressed by CA-policy.

I prefer the latter :)
Regardless, appreciate if somebody help me close this thread.
Can we use custom-security-attribute to fine tune such access through CA-policy.
Obviously I would avoid to wrap "All Cloud Resources" in the CA policy as it will be too restrictive.

Thanks.
risolis 8,741 Reputation points

2022-04-28T04:54:45.45+00:00

Hello @testuser7

Thank you for your post.

I would like to confirm if I understood correctly your statement....

Are you referring to the following info ? https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/require-tou

Looking forward to your feedback,

BR,
risolis 8,741 Reputation points

2022-04-28T06:38:31.193+00:00

Hi,

I found this info that might be helpful for your concern.

https://learningbydoing.cloud/blog/getting-started-with-custom-security-attributes-in-azuread/#:~:text=Custom%20Security%20Attributes%20are%20organization-specific%20key-value%20paired%20attributes,not%20even%20Global%20Admins%2C%20without%20specifically%20assigning%20permissions.

Cheers,

2 answers

Your answer

testuser7 286 Reputation points

2022-04-26T12:34:55.327+00:00

Hi @AmanpreetSingh-MSFT

I have opened one thread at https://learn.microsoft.com/en-us/answers/questions/825145/azure-ad-conditional-access-2.html to discuss about AAD Conditional Policy.
Would you please look into it and help me.

Thanks.
testuser7 286 Reputation points

2022-04-27T15:51:59.993+00:00

hello team,

Any update on my above query ?
As usually MSFT folks are very prompt answering, looks like my concern is either too foolish OR too SPOT ON and not yet addressed by CA-policy.

I prefer the latter :)
Regardless, appreciate if somebody help me close this thread.
Can we use custom-security-attribute to fine tune such access through CA-policy.
Obviously I would avoid to wrap "All Cloud Resources" in the CA policy as it will be too restrictive.

Thanks.
risolis 8,741 Reputation points

2022-04-28T04:54:45.45+00:00

Hello @testuser7

Thank you for your post.

I would like to confirm if I understood correctly your statement....

Are you referring to the following info ? https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/require-tou

Looking forward to your feedback,

BR,
risolis 8,741 Reputation points

2022-04-28T06:38:31.193+00:00

Hi,

I found this info that might be helpful for your concern.

https://learningbydoing.cloud/blog/getting-started-with-custom-security-attributes-in-azuread/#:~:text=Custom%20Security%20Attributes%20are%20organization-specific%20key-value%20paired%20attributes,not%20even%20Global%20Admins%2C%20without%20specifically%20assigning%20permissions.

Cheers,

Answer 1

risolis 8,741

Hello @testuser7

I just wanted to follow up on this concern and if further assistance is required please let us know!

Regards,

Answer 2

testuser7 286

We can close it.. I have requested private preview for CA-policy with Custom-security-attribute.
Hopefully that is the answer to my query.

risolis 8,741 Reputation points

2022-05-03T04:43:08.603+00:00

Understood.

Many thanks for your feedback!

Share via

azure ad conditional access

2 answers

Your answer