Microsoft Entra Conditional Access: signals, controls, and 'if-then' access rules

Signals (the 'if' part)

Signals describe the sign-in context that policies evaluate. Who: user, group, role. What: cloud app / target resource. Where: locations, networks. How: browser vs client apps. Device context: platform plus managed/compliant state.