Conditional Access baseline: a report-only-first runbook
A sourced Conditional Access baseline for Entra: emergency access, legacy authentication, MFA, admin protection and a report-only rollout that avoids lockouts.
Focus area
Deep dives covering Conditional Access.
Guides, runbooks, and opinions focused on Conditional Access.
A baseline for Entra break-glass accounts: two cloud-only Global Administrators, phishing-resistant MFA, Conditional Access exclusions, alerts, 90-day test.
Jump into the guided path, or browse everything if you’re after something specific.
Hop between landing zones, identity, networking, and more.
Search
Type an Azure service, control, or tag. Results refresh after every deploy.
Examples: landing zone policy, workload identity, vpn gateway