Microsoft 365 Conditional Access — five policies many forget

Risk-based sign-in, app protection on mobile, geo-restriction on service accounts. Lessons learned.

What it is about

Risk-based sign-in, app protection on mobile, geo-restriction on service accounts. Lessons learned.

What we did

Three steps in practice. Discovery, pilot, hand-over. We document every action inside the tenant instance — no shadow log, no vendor stuff.

What you can take with you

Write to us if you want templates or scripts from this engagement. We share what we are allowed to share.