Microsoft Entra Conditional Access (CA)
Conditional Access applies 'if-then' rules to decide how sign-ins to apps/resources should proceed. Identity-driven policy engine (not a network tool). Uses sign-in context to decide access. Outcomes: allow, require extra steps, or block. Supports a Zero Trust approach.

