Conditional Access controls, for example app-enforced restrictions and sign-in frequency, that constrain a session. They do not enforce MFA.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Session controls in context, with comparison tables and the common traps.
Terms in this definition
- Conditional Access
Policy engine in Microsoft Entra ID P1 that, depending on signals such as risk or named locations, allows access subject to controls like MFA or a compliant device, or blocks it.
- Sign-in frequency
Session control in Conditional Access that makes users authenticate again once a configured period has passed.
- MFA
Multifactor authentication: asking for another factor on top of a password at sign-in, usually required by a Conditional Access grant control.