Skip to content

Conditional Access concepts

How access policies use signals to decide who gets in, and how to roll them out without locking people out.

Level
Intermediate
Length
About 30 minutes
Contents
3 lessons · 1 video · final exam
Status
Published · updated 2 Oct 2026
  • Microsoft Entra ID
  • Microsoft 365

Skills you'll practise

  • Describe the signals and decisions in an access policy.
  • Explain report-only mode and why to use it first.
  • Explain why emergency accounts are excluded.
  • Read a sign-in failure and tell whether a policy blocked it.

Course outline

  1. 1.Conditional Access conceptsVideo · 4 min
  2. 2.Signals, decisions and safe rolloutLesson · 8 min
  3. 3.Reading sign-in logs for policy resultsLesson · 8 min
  4. 4.Exclusions, emergency accounts and named locationsLesson · 8 min
  5. 5.Conditional Access concepts: knowledge checkKnowledge check · 18 questions
  6. 6.Microsoft 365 user can't sign inScenario
  7. 7.Final exam8 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

  • Microsoft Learn: What is Conditional Access?
  • Microsoft Learn: Conditional Access report-only mode
  • Microsoft Learn: Manage emergency access accounts in Microsoft Entra ID

See it with your own jobs and topics

Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.