Azure AD, Conditional Access App Control licensing

[helipetr]

Hi,

Could someone clarify licensing requirements for using "Use Conditional Access App Control" option in Azure AD conditional access policies. MCAS licensing datasheet has a statement that "It (AADPP1) includes MCAS Discovery and Risk Assessment capabilities and adds the ability to leverage reverse proxy capabilities to apply real-time monitoring and control of user sessions for MCAS, as well as OCAS customers." Datasheet can be found here: https://aka.ms/mcaslicensing

Does that mean that if tenant has 100 MCAS licensed users and 5000 AADPP1 licensed users, all 5000 AADPP1 licensed users are also licensed/allowed to use conditional access app control?

[#2]

Hi @helipetr,

Please see here

https://docs.microsoft.com/en-us/cloud-app-security/proxy-deployment-aad

To deploy Conditional Access App Control for Azure AD apps, you need a valid license for Azure AD Premium P1 as well as a Cloud App Security license

You need both licences on a user to a able to use it. In the example you gave 100 users with both MCAS licence and AADP1 would be allowed to use conditional access app control.

Hope that answers your question!

Best, Chris