Microsoft Entra Conditional Access: signals, controls, and 'if-then' access rules

Device context (managed / compliant)

You can require stronger access conditions when the device isn't trusted. Device platform can be evaluated. Managed/compliant state can be used (with device management integration). Sensitive apps often require compliant devices. Alternative outcome: block access.