Configuring Azure Conditional Access (Optional)

the azure conditional access validates user, device, location, and risk level before granting or denying access the email+ app is migrated from azure active directory authentication library (adal) to microsoft authentication library (msal) to support azure conditional access optionally, configure azure conditional access to restrict non compliant devices and unmanaged microsoft 365 accounts creating a new conditional access policy the following procedure describes how to create a new policy using azure admin portal procedure in the azure admin portal, login as admin go to security > protect > conditional access in conditional access settings, click create new policy to create a new policy in new conditional access policy page, update the following fields to create a new policy fields option name enter name of the policy assignments controls the access based on who the policy will be applied to, such as users and groups, workload identities, directory roles or external guests, and so on under users select include exclude target resources select email+auth conditions select device platforms android ios access controls grant controls access enforcement to block or grant access under grant section, select the following as required grant access select require device to be marked as compliant enable policy toggle and select from the following options report only policies in report only more requiring compliant devices may prompt users on macos, ios, android, and linux to select a device certificate on off click create to save the policy editing a conditional access policy the following procedure describes how to edit the existing policy to configure azure conditional access using the email+auth procedure in the azure admin portal , login as admin go to security > protect > conditional access > policies select and edit the policy, and update the following add email+ auth application as a target resource go to access controls > grant and select the require device to be marked as compliant option the email+ application is now set up for azure conditional access to support complaint devices