Functionality of Conditional Access, MFA and SSO
https://www.youtube.com/watch?v=DFwERh9Xxk0&list=PLlVtbbG169nED0_vMEniWBQjSoxTsBYS3&index=45
Conditional Access
Enforced through policies
You can target all applications, a particular application, a certain user, etc
They need to follow conditions to be granted access
ex. Are they using MFA or are they on a proper device
MFA
Available on AAD P1+ subscriptions
You might have the authenticator app, sms, call, token, etc
Security defaults (without p1 or higher) you only get MFA like the auth app
SSO (Single or seamless sign on)
Authenticate to Azure AD, which then grants you tokens that can be used elsewhere creating a seamless experience for the user
Last updated