Microsoft Entra Conditional Access: signals, controls, and 'if-then' access rules

Conditional Access = 'If → Then'

Signals define the 'if,' and controls define the 'then.' IF: conditions match (signals). THEN: enforce an access outcome (controls). Match higher risk → stronger requirements. Keeps low-risk sign-ins smoother.