Blog Post

Microsoft Entra Blog
4 MIN READ

Granular Conditional Access for sensitive data and actions

Alex Weinert's avatar
Alex Weinert
Former Employee
Mar 08, 2021
Today I am excited to share how you can maximize user productivity AND protect your most sensitive resources with Conditional Access authentication context. Conditional Access is the Zero Trust contr...
Updated Aug 19, 2021
Version 2.0
Alex Weinert's avatar
Former Employee
Joined October 02, 2018
View Profile
Microsoft Entra Blog
Stay informed on how to secure access for employees, customers, and non-human identities, from anywhere, to multicloud and on-premises resources, with comprehensive identity and network access solutions powered by AI.
mikeburns7's avatar
mikeburns7
Copper Contributor
Mar 09, 2021

Azure AD Privileged Identity Management(PIM)role activation:When a user activates Azure AD or Azure roles, you can require Conditional Access policies likehttps://azure.microsoft.com/en-us/resources/videos/multi-factor-authentication-for-azure-ad/, third-party multi-factor authentication, device compliance, Azure Identity Protection risk levels, or location-based controls. This will make it more difficult for an attacker to act in a privileged role.

I do not see any Microsoft reference to third-party MFA being an option for PIM. 

Alex Weinert - has this changed? If so, can you point me in the direction on how to configure this?