Access rules in Entra ID
Conditional Access controls sign-in by applying rules like requiring Multifactor Authentication (MFA). Conditional Access equals sign-in policy engine. Multifactor Authentication (MFA) adds a second check. You must configure policies and roles. 'Managed identity' does not mean 'automatic security'.