Greetings! At the recent Microsoft Secure event, we provided an early look at a new feature of conditional access which lets you strictly enforce location policies with continuous access evaluation (...
Updated Nov 09, 2023
Version 2.0
Blog Post
2 MIN READ
Public Preview: Strictly Enforce Location Policies with Continuous Access Evaluation
Alex Weinert thank you for this article.
While this is very helpful for us to protect from advanced phishing i have a question:
Lets say
We have a ca rule which enforces MFA but not if the users are in a special location (eg in our LAN ). It onlym trigger mfa outside this location. Would the new CAE feature trigger a new login with mfa in our case if the users gets aniother ip or mor important if someone tries to phish a user from outside? Would this prevent advanced phishing attacks (evilginx)?
Thank you