azure ad conditional access

testuser7 271

Hello,

I have one basic question around Conditional Access Policies.

As we know , Azure AD CA-Policies help us undergo the additional factors while any client-app is requesting token for any CLOUD RESOURCE

I have a client-app which is just preparing OAuth request with SCOPE=OpenID and redirecting user to AAD to collect the token.

If AAD-admin wants to make sure that such request must undergo MFA or TOU or any other CA-policy grant, which minimal set of CLOUD RESOURCE should be added in that CA-policy ??

Thanks

testuser7 271 Reputation points

2022-04-26T12:34:55.327+00:00

Hi @AmanpreetSingh-MSFT

I have opened one thread at https://learn.microsoft.com/en-us/answers/questions/825145/azure-ad-conditional-access-2.html to discuss about AAD Conditional Policy.
Would you please look into it and help me.

Thanks.
testuser7 271 Reputation points

2022-04-27T15:51:59.993+00:00

hello team,

Any update on my above query ?
As usually MSFT folks are very prompt answering, looks like my concern is either too foolish OR too SPOT ON and not yet addressed by CA-policy.

I prefer the latter :)
Regardless, appreciate if somebody help me close this thread.
Can we use custom-security-attribute to fine tune such access through CA-policy.
Obviously I would avoid to wrap "All Cloud Resources" in the CA policy as it will be too restrictive.

Thanks.
risolis 8,721 Reputation points

2022-04-28T04:54:45.45+00:00

Hello @testuser7

Thank you for your post.

I would like to confirm if I understood correctly your statement....

Are you referring to the following info ? https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/require-tou

Looking forward to your feedback,

BR,
risolis 8,721 Reputation points

2022-04-28T06:38:31.193+00:00

Hi,

I found this info that might be helpful for your concern.

https://learningbydoing.cloud/blog/getting-started-with-custom-security-attributes-in-azuread/#:~:text=Custom%20Security%20Attributes%20are%20organization-specific%20key-value%20paired%20attributes,not%20even%20Global%20Admins%2C%20without%20specifically%20assigning%20permissions.

Cheers,

2 answers

risolis 8,721 Reputation points

2022-05-02T06:23:27.797+00:00

Hello @testuser7

I just wanted to follow up on this concern and if further assistance is required please let us know!

Regards,
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
testuser7 271 Reputation points

2022-05-02T15:10:01.55+00:00

We can close it.. I have requested private preview for CA-policy with Custom-security-attribute.
Hopefully that is the answer to my query.
Please sign in to rate this answer.
risolis 8,721 Reputation points

2022-05-03T04:43:08.603+00:00

Understood.

Many thanks for your feedback!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

azure ad conditional access

2 answers

Your answer