---
title: Creating a conditional access policy in Microsoft Endpoint Manager
slug: device-management-apple/creating-a-conditional-access-policy-in-microsoft-endpoint-manager
createdAt: 2026-10-06T07:47:38.487Z
---

This section addresses defining the conditional access policy in Microsoft Endpoint Manager.

**Procedure **

1. Log in to Microsoft Endpoint Manager [https://endpoint.microsoft.com](https://endpoint.microsoft.com/).
2. In the Microsoft Endpoint Manager administrator center page, go to Home > Endpoint Security > Conditional Access.
3. Click on Policies and then click + New Policy.

   The New conditional access policy page opens.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/GM4D8-G8NR2olGjqyGuRB_msem01addnewpol.png" size="58" isUploading="false" initialPath="../Resources/Images/MSEM_01_AddnewPol.png" githubPath="Device Management Guide for Apple/Resources/Images/MSEM_01_AddnewPol.png" width="583" height="123" darkWidth="583" darkHeight="123" showCaption="false" indent="1"}

4. Enter the Name of the conditional access policy.


::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/-jDdy-RCai6TBOLq2fJDX_msem02addnewpol.png" size="52" isUploading="false" initialPath="../Resources/Images/MSEM_02_AddnewPol.png" githubPath="Device Management Guide for Apple/Resources/Images/MSEM_02_AddnewPol.png" width="515" height="597" darkWidth="515" darkHeight="597" showCaption="false" indent="1"}

5. In Assignments, click to assign the policy to users and groups.


::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/BspsN4MGeOGayRs6E6U8x_msem03addnewpol.png" size="46" isUploading="false" initialPath="../Resources/Images/MSEM_03_AddnewPol.png" githubPath="Device Management Guide for Apple/Resources/Images/MSEM_03_AddnewPol.png" width="463" height="364" darkWidth="463" darkHeight="364" showCaption="false" indent="1"}

6. In the New conditional access Policy page, click Cloud apps or actions and then click Select. Search for and select the apps that are required to be protected as part of this new policy.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/t5frjuaC36Q0BsHhT_KKA_msem04addnewpol.png" size="61" isUploading="false" initialPath="../Resources/Images/MSEM_04_AddnewPol.png" githubPath="Device Management Guide for Apple/Resources/Images/MSEM_04_AddnewPol.png" width="610" height="258" darkWidth="610" darkHeight="258" showCaption="false" indent="1"}

7. In the New conditional access policy page, click on Conditions and then click on Device Platform. Select the appropriate device platforms.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/KTYUmtbmHvT6tmI_KRL0__msem05addnewpol.png" size="48" isUploading="false" initialPath="../Resources/Images/MSEM_05_AddnewPol.png" githubPath="Device Management Guide for Apple/Resources/Images/MSEM_05_AddnewPol.png" width="484" height="274" darkWidth="484" darkHeight="274" showCaption="false" indent="1"}

8. In the New conditional access policy page > Access controls, click on Grant and make the access and block selections.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/ODK6fQVSE4IsVag8xby-u_msem06addnewpol.png" size="20" isUploading="false" initialPath="../Resources/Images/MSEM_06_AddnewPol.png" githubPath="Device Management Guide for Apple/Resources/Images/MSEM_06_AddnewPol.png" width="199" height="386" darkWidth="199" darkHeight="386" showCaption="false" indent="1"}

9. To enable the new policy, click On.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/RoyNJQZ76NOlvOLISbpxN_msem07addnewpol.png" size="60" isUploading="false" initialPath="../Resources/Images/MSEM_07_AddnewPol.png" githubPath="Device Management Guide for Apple/Resources/Images/MSEM_07_AddnewPol.png" width="600" height="220" darkWidth="600" darkHeight="220" showCaption="false" indent="1"}

10. Click the Create button. The new conditional access policy displays in the Conditional Access > Policies page.

**Next steps** 

[Connecting Microsoft Azure to Ivanti EPMM](docId\:CfpByYdbPdQHkbgLWslm9)