Routes browser sessions through a Defender for Cloud Apps reverse proxy so that Entra Conditional Access can enforce access and session policies on them as they happen.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Conditional Access App Control in context, with comparison tables and the common traps.
Terms in this definition
- Conditional Access
Policy engine in Microsoft Entra ID P1 that, depending on signals such as risk or named locations, allows access subject to controls like MFA or a compliant device, or blocks it.
Related terms
- Defender for Cloud Apps session policy
Policy in Conditional Access App Control that watches or restricts what users do in browser sessions, such as downloading, uploading or copying. Tool calls made by AI agents fall outside it.
- Session policy
Using Conditional Access app control, browser sessions can be routed through Microsoft Defender for Cloud Apps, where this kind of policy watches and restricts user actions in real time, for example stopping sensitive files from being downloaded.