Conditional Access concepts
How access policies use signals to decide who gets in, and how to roll them out without locking people out.
- Level
- Intermediate
- Length
- About 30 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 2 Oct 2026
- Microsoft Entra ID
- Microsoft 365
Skills you'll practise
- Describe the signals and decisions in an access policy.
- Explain report-only mode and why to use it first.
- Explain why emergency accounts are excluded.
- Read a sign-in failure and tell whether a policy blocked it.
Course outline
- 1.Conditional Access conceptsVideo · 4 min
- 2.Signals, decisions and safe rolloutLesson · 8 min
- 3.Reading sign-in logs for policy resultsLesson · 8 min
- 4.Exclusions, emergency accounts and named locationsLesson · 8 min
- 5.Conditional Access concepts: knowledge checkKnowledge check · 18 questions
- 6.Microsoft 365 user can't sign inScenario
- 7.Final exam8 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
- Microsoft Learn: What is Conditional Access?
- Microsoft Learn: Conditional Access report-only mode
- Microsoft Learn: Manage emergency access accounts in Microsoft Entra ID
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.