%3CLINGO-SUB%20id%3D%22lingo-sub-1152280%22%20slang%3D%22en-US%22%3ERe%3A%20Introducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1152280%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20it%20still%20in%20preview%20(as%20shown%20on%20your%20screenshot)%3F%20or%20it%20is%20production-ready%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1152964%22%20slang%3D%22en-US%22%3ERe%3A%20Introducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1152964%22%20slang%3D%22en-US%22%3E%3CP%3EDo%20the%20standard%20conditional%20access%20licensing%20requirements%20apply%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1154500%22%20slang%3D%22en-US%22%3ERe%3A%20Introducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1154500%22%20slang%3D%22en-US%22%3E%3CP%3EI%20got%20excited%20and%20then%20realized%20this%20still%20requires%20an%20Azure%20AD%20premium%20plan.%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fsad_40x40_1.gif%22%20alt%3D%22%3Asad%3A%22%20title%3D%22%3Asad%3A%22%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1156269%22%20slang%3D%22en-US%22%3ERe%3A%20Introducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1156269%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20should%20we%20expect%20to%20see%20this%20in%20our%20tenant%20as%20it%20is%20not%20currently%20available.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1157583%22%20slang%3D%22en-US%22%3ERe%3A%20Introducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1157583%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F129574%22%20target%3D%22_blank%22%3E%40Rafa%C5%82%20Fitt%3C%2FA%3E%26nbsp%3B%2C%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20feature%20just%20entered%20public%20preview.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1157585%22%20slang%3D%22en-US%22%3ERe%3A%20Introducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1157585%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F119164%22%20target%3D%22_blank%22%3E%40Nadine%20Killiard%3C%2FA%3E%26nbsp%3B%2C%20standard%20licensing%20applies%20applies%20for%20this.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1157588%22%20slang%3D%22en-US%22%3ERe%3A%20Introducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1157588%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102408%22%20target%3D%22_blank%22%3E%40Manoj%20Sood%3C%2FA%3E%26nbsp%3B%2C%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20should%20be%20fully%20enabled%20now.%20If%20you%20still%20aren't%20seeing%20the%20option%20you%20can%20DM%20on%20Twitter%20(%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F353454%22%20target%3D%22_blank%22%3E%40caleb_b%3C%2FA%3E%20)%20with%20your%20tenant%20ID%20and%20I'll%20take%20a%20look.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1158512%22%20slang%3D%22en-US%22%3ERe%3A%20Introducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1158512%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F353454%22%20target%3D%22_blank%22%3E%40caleb_b%3C%2FA%3E%20Either%20I%20missed%20it%20previously%20or%20is%20showed%20up%20overnight.%20In%20either%20case%20I%20have%20it%20now.%20Based%20my%20understanding%20of%20the%20documentation%2C%20what%20I'm%20most%20interested%20in%20is%20the%20ability%20to%20put%20CA%20controls%20on%20Office.com.%20This%20has%20not%20previously%20been%20possible.%20Since%20all%20the%20other%20Applications%20in%20this%20grouping%20are%20already%20there%20own%20individual%20apps%20to%20select%2C%20Are%20there%20any%20plans%20to%20make%20Office.com%20be%20individually%20selectable%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1245240%22%20slang%3D%22en-US%22%3ERe%3A%20Introducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1245240%22%20slang%3D%22en-US%22%3E%3CP%3EWould%20be%20great%20to%20seperate%20each%20application%20too.%3C%2FP%3E%3CP%3EAnd%20include%20MyApps%20portal%20which%20is%20currently%20not%20possible.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1300414%22%20slang%3D%22en-US%22%3ERe%3A%20Introducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1300414%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20we%20get%20and%20use%20this%2C%20it%20works%20fine%2C%20but%20we%20are%20also%20still%20trying%20to%20allow%20the%20Android%20outlook%20app%20and%20Skype%20and%20teams%20to%20work.%26nbsp%3B%20We%20have%20added%20those%203%20apps%20to%20an%20exclusion%20and%20while%20it%20kinda%20works%2C%20we%20don't%20seem%20to%20be%20able%20to%20use%20the%20outlook%20android%20app%20as%20it%20comes%20up%20with%20a%20please%20sign%20in%20at%20the%20bottom.%26nbsp%3B%20When%20you%20try%20and%20sign%20in%20it%20gives%20an%20error.%26nbsp%3B%20Anyone%20else%20having%20this%20issue%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1131979%22%20slang%3D%22en-US%22%3EIntroducing%20Conditional%20Access%20for%20the%20Office%20365%20suite!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1131979%22%20slang%3D%22en-US%22%3E%3CP%3EHowdy%20folks%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EToday%2C%20I%E2%80%99m%20super%20excited%20to%20announce%20the%20public%20preview%20of%20Conditional%20Access%20for%20the%20Office%20365%20suite.%20For%20organizations%20setting%20policy%20on%20Office%20365%E2%80%94such%20as%20requiring%20users%20to%20perform%20Multi-Factor%20Authentication%20(MFA)%20or%20have%20managed%20devices%E2%80%94of%20Conditional%20Access%20for%20the%20Office%20365%20suite%20makes%20the%20configuration%20a%20whole%20lot%20easier.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHundreds%20of%20millions%20of%20people%20use%20the%20Office%20365%20apps%20like%20SharePoint%20Online%2C%20Exchange%20Online%2C%20and%20Microsoft%20Teams.%20Part%20of%20what%20makes%20these%20services%20work%20so%20well%20is%20they%20interact%20with%20each%20other%20and%20a%20have%20a%20collection%20of%20supporting%20services.%20There%20are%20tons%20of%20benefits%20of%20integration%E2%80%94one%20example%20is%20shared%20contact%20information%20in%20Exchange%20for%20SharePoint%20and%20Teams.%20In%20many%20ways%2C%20even%20though%20Office%20365%20is%20composed%20of%20many%20cooperating%20services%2C%20it%20functions%20as%20a%20single%20app%20to%20help%20your%20users%20be%20productive.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EConditional%20Access%20can%20be%20used%20to%20protect%20all%20Azure%20AD%20connected%20apps%2C%20including%20thousands%20of%20pre-integrated%20SaaS%20apps%2C%20apps%20your%20organization%20has%20developed%2C%20as%20well%20as%20hybrid%20apps%20accessed%20through%20the%20Azure%20Application%20Proxy.%20However%2C%20because%20of%20the%20close%20relationship%20between%20Office%20services%20it%20makes%20sense%20to%20help%20you%20target%20Office%20365%20as%20a%20single%20app%20with%20Azure%20AD%20Conditional%20Access%20policies.%20Many%20of%20you%20have%20asked%20for%20this%20capability%2C%20and%20we%20worked%20with%20several%20customers%20to%20make%20sure%20we%20got%20the%20feature%20right.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EConditional%20Access%20for%20the%20Office%20365%20suite%20gives%20admins%20the%20option%20to%20assign%20policy%20across%20Office%20365%20with%20one%20click.%26nbsp%3B%20It%20provides%20consistent%20coverage%20and%20improves%20the%20user%20experience%20by%20setting%20a%20consistent%20policy%20across%20Office%20365%20apps.%20Assigning%20different%20policies%20to%20different%20services%20can%20result%20in%20unexpected%20interrupts%20as%20users%20access%20data%20that%20requires%20service%20to%20service%20interaction.%20To%20learn%20more%20about%20this%20topic%2C%20see%20our%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FCA_Service_Dependencies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EConditional%20Access%20service%20dependencies%3C%2FA%3E%20documentation.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20also%20enforce%20policy%20to%20apps%20that%20aren%E2%80%99t%20available%20in%20the%20Conditional%20Access%20app%20list%2C%20like%20the%20Office.com%20portal.%20See%20the%20%3CA%20href%3D%22https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flinkid%3D2110776%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ecomplete%20list%20of%20individual%20apps%20included%20in%20the%20Conditional%20Access%20for%20the%20Office%20365%20suite%3C%2FA%3E.%20We%E2%80%99ll%20add%20new%20Office%20apps%20as%20they%E2%80%99re%20released%2C%20and%20your%20policies%20will%20be%20automatically%20applied.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20id%3D%22toc-hId-1084358805%22%20id%3D%22toc-hId-1084358805%22%3EHow%20Conditional%20Access%20for%20the%20Office%20365%20suite%20works%3C%2FH3%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ELet%E2%80%99s%20take%20a%20closer%20look%20at%20how%20to%20use%20Conditional%20Access%20for%20the%20Office%20365%20suite.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20configure%20Conditional%20Access%20policy%20in%20Azure%20AD%20like%20you%20normally%20would.%20When%20making%20the%20app%20assignment%2C%20select%20Office%20365%20(preview)%20shown%20below.%20(We%20put%20it%20right%20at%20the%20top%20of%20the%20list%20to%20make%20it%20easy%20to%20find.)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Introducing%20the%20Office%20365%20app%20for%20Conditional%20Access%201.png%22%20style%3D%22width%3A%20977px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F167597i95EA17404EB0FDA1%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Introducing%20the%20Office%20365%20app%20for%20Conditional%20Access%201.png%22%20alt%3D%22Introducing%20the%20Office%20365%20app%20for%20Conditional%20Access%201.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EWhen%20you%20finish%20setting%20up%20your%20policy%2C%20try%20running%20it%20in%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fcaromdoc%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ereport-only%20mode%3C%2FA%3E.%20Using%20Conditional%20Access%20report-only%20mode%20will%20let%20you%20try%20out%20your%20policy%20right%20away%20and%20review%20the%20impact%20the%20policy%20will%20have%20before%20enabling%20it%20for%20your%20users.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOne%20additional%20thing%20I%E2%80%99d%20like%20to%20note.%20Those%20of%20you%20who%20prefer%20to%20set%20different%20Conditional%20Access%20Policies%20for%20each%20Office%20workload%20can%20still%20do%20that.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ELearn%20more%20about%20the%20%3CA%20href%3D%22https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flinkid%3D2110776%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EConditional%20Access%20for%20the%20Office%20365%20suite%3C%2FA%3E.%20Please%20try%20out%20the%20preview%20and%20let%20us%20know%20what%20you%20think%20in%20the%20comments%20below%E2%80%94your%20feedback%20is%20super%20valuable%20and%20greatly%20appreciated.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%20regards%2C%3C%2FP%3E%0A%3CP%3EAlex%20Simons%20(%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftwitter.com%2FAlex_A_Simons%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%40Alex_A_Simons%3C%2FA%3E%26nbsp%3B)%3C%2FP%3E%0A%3CP%3ECorporate%20VP%20of%20Program%20Management%3C%2FP%3E%0A%3CP%3EMicrosoft%20Identity%20Division%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1131979%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20made%20it%20easier%20to%20assign%20Conditional%20Access%20to%20Office%20365%20suite.%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Introducing%20the%20Office%20365%20app%20for%20Conditional%20Access%20teaser.png%22%20style%3D%22width%3A%20363px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F167596iC78FF8FE61C1BA8F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Introducing%20the%20Office%20365%20app%20for%20Conditional%20Access%20teaser.png%22%20alt%3D%22Introducing%20the%20Office%20365%20app%20for%20Conditional%20Access%20teaser.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1131979%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIdentity%20and%20Access%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E

Howdy folks,

 

Today, I’m super excited to announce the public preview of Conditional Access for the Office 365 suite. For organizations setting policy on Office 365—such as requiring users to perform Multi-Factor Authentication (MFA) or have managed devices—of Conditional Access for the Office 365 suite makes the configuration a whole lot easier.

 

Hundreds of millions of people use the Office 365 apps like SharePoint Online, Exchange Online, and Microsoft Teams. Part of what makes these services work so well is they interact with each other and a have a collection of supporting services. There are tons of benefits of integration—one example is shared contact information in Exchange for SharePoint and Teams. In many ways, even though Office 365 is composed of many cooperating services, it functions as a single app to help your users be productive.

 

Conditional Access can be used to protect all Azure AD connected apps, including thousands of pre-integrated SaaS apps, apps your organization has developed, as well as hybrid apps accessed through the Azure Application Proxy. However, because of the close relationship between Office services it makes sense to help you target Office 365 as a single app with Azure AD Conditional Access policies. Many of you have asked for this capability, and we worked with several customers to make sure we got the feature right. 

 

Conditional Access for the Office 365 suite gives admins the option to assign policy across Office 365 with one click.  It provides consistent coverage and improves the user experience by setting a consistent policy across Office 365 apps. Assigning different policies to different services can result in unexpected interrupts as users access data that requires service to service interaction. To learn more about this topic, see our Conditional Access service dependencies documentation.

 

You can also enforce policy to apps that aren’t available in the Conditional Access app list, like the Office.com portal. See the complete list of individual apps included in the Conditional Access for the Office 365 suite. We’ll add new Office apps as they’re released, and your policies will be automatically applied.

 

How Conditional Access for the Office 365 suite works

 

Let’s take a closer look at how to use Conditional Access for the Office 365 suite.

 

You can configure Conditional Access policy in Azure AD like you normally would. When making the app assignment, select Office 365 (preview) shown below. (We put it right at the top of the list to make it easy to find.)

 

Introducing the Office 365 app for Conditional Access 1.png

When you finish setting up your policy, try running it in report-only mode. Using Conditional Access report-only mode will let you try out your policy right away and review the impact the policy will have before enabling it for your users.

 

One additional thing I’d like to note. Those of you who prefer to set different Conditional Access Policies for each Office workload can still do that.

 

Learn more about the Conditional Access for the Office 365 suite. Please try out the preview and let us know what you think in the comments below—your feedback is super valuable and greatly appreciated.

 

Best regards,

Alex Simons ( @Alex_A_Simons )

Corporate VP of Program Management

Microsoft Identity Division

 

 

 

10 Comments
Occasional Contributor

Is it still in preview (as shown on your screenshot)? or it is production-ready?

Senior Member

Do the standard conditional access licensing requirements apply?

Occasional Visitor

I got excited and then realized this still requires an Azure AD premium plan. :sad:

Occasional Contributor

When should we expect to see this in our tenant as it is not currently available. 

Senior Member

Hi @Rafał Fitt , 

The feature just entered public preview.

Senior Member

@Nadine Killiard , standard licensing applies applies for this. 

Senior Member

Hi @Manoj Sood , 

This should be fully enabled now. If you still aren't seeing the option you can DM on Twitter ( @caleb_b ) with your tenant ID and I'll take a look. 

Occasional Contributor

@caleb_b Either I missed it previously or is showed up overnight. In either case I have it now. Based my understanding of the documentation, what I'm most interested in is the ability to put CA controls on Office.com. This has not previously been possible. Since all the other Applications in this grouping are already there own individual apps to select, Are there any plans to make Office.com be individually selectable? 

Regular Visitor

Would be great to seperate each application too.

And include MyApps portal which is currently not possible.

Occasional Contributor

When we get and use this, it works fine, but we are also still trying to allow the Android outlook app and Skype and teams to work.  We have added those 3 apps to an exclusion and while it kinda works, we don't seem to be able to use the outlook android app as it comes up with a please sign in at the bottom.  When you try and sign in it gives an error.  Anyone else having this issue?