Services / Entra ID and Conditional Access
Entra ID and Conditional Access.
Access that adds up.
Secure sign-in and access control in Microsoft Entra ID: MFA and Conditional Access, roles and permissions, and a joiner-mover-leaver process that does not depend on manual work.
01
What I set up
An identity environment where it is clear who can access what, and where sign-in is secure without getting in users’ way.
Including
- MFA, SSO and Conditional Access policies
- Roles, permissions and group structure
- Joiner-mover-leaver processes, automated with Microsoft Graph
- Hybrid environments with Active Directory
- Email security and compliance settings
02
How I approach it
I test Conditional Access policies in report-only mode first, so you see the effect before anything is enforced. Exclusions and emergency accounts are documented explicitly.
Steps
- Analysis of current sign-ins and permissions
- Policies in report-only mode first, then phased enforcement
- Emergency access and exclusions documented
- Documentation of policies and processes
03
From practice
For a European organisation with around 400 users, I automated the account joiner-mover-leaver process with PowerShell and Microsoft Graph, and was the final escalation point for access and email.
Frequently asked questions
Good to know.
What is Conditional Access?
Policies in Microsoft Entra ID that decide under which conditions someone gets access, for example only with MFA, from a managed device or from certain countries.
Can I introduce Conditional Access without locking people out?
Yes. Running policies in report-only mode first shows who will be affected. You then introduce them in phases, with documented emergency access.
What do you mean by joiner-mover-leaver?
The process around new staff, role changes and leavers. When accounts, groups and licences follow automatically, nobody has too much access or keeps it too long.
Your next step
What does your
IT environment need?
For a project or a one-off assignment, tell me about the problem and what you want to achieve. We can then discuss the approach and scope.