Conditional Access Enforcement Report

This guide will show an administrator how to view Conditional Access enforcement on user logins, showing if proper policy enforcement is being applied.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Compliance

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

1. Navigate to the Conditional Access Overview – Azure Active Directory portal, we will want to locate and select the Monitoring (preview) tab. Here you will find information about recent authentication access that was enforced on user sign-ins. The available information will be detailed as, Access Granted Controls Applied (Conditional Access Policies granted access while enforcing controls such as requiring MFA when accessing specified resources like Office 365.), Access Denied Controls Applied (Conditional Access Policies issued a block due to failure to meet the required access controls such as not verifying MFA.), Access Granted No Policies Applied (Conditional Access Policies were not applied when accessing the target resource, and access was granted without restrictions.) Filtering can be adjusted if you know specific information related to the event you are trying to explore.
   

Need Assistance?