Certify Electronically Sign Conditional with airSlate SignNow

Certify signed conditional

in this lesson we're going to talk about the functionality of conditional access mfa and sso i already mentioned the term conditional access and this sso capability i previously drew the idea that we have our azure ad tenant for our organization and we had the idea that there are accounts either created in the cloud or they were synchronized from on-premises and i talked about the idea that well with azure id and centralizing that identity it also gives us a single point to not only secure the identity but specify controls around well what is required to be able to use all the applications that trust my azure id instance so we have this idea of this nice protective conditional access and this is through the creation of policies and what these policies do is basically i set conditions that need to be met based on the criteria of the specification of the particular policy so i could target a particular remember i've got all these different applications trusting my azure ad tenant for its authentication and authorization so i could target all cloud applications a particular cloud application i could target hey this group of users from this location if they're on this type of device if there's a certain risk so i have all these different things that i can match and filter on for if this policy applies and then i have the conditions that they need to meet that condition could be focused around maybe the device they're using is it known and healthy to the azure id did they perform multi-factor authentication which we'll get to and maybe things like what is their risk there's all these different elements so if we go and actually look at a conditional access policy this will all get much clearer so this is part of azure ad so i go to my azure ad tenant i'm going to go down to my security and then under security i can see my conditional access so if i go to conditional access here i have a whole list of policies that i've already created now notice there is the idea of things like named locations so i can create actual locations based on sets of public-facing ip addresses or even things like countries and even gps coordinates so if i look at named locations for a second hey i could create a country's location and i could determine that by ip address or by gps coordinates if it's a mobile device or i can just specify a list of ip ranges i can create pdf documents which could be terms of use that can be shown and presented that they have to accept before they could access a certain application but ultimately we create a policy and if i just say create a new policy you give it a name and then you target hey i want to target maybe all users maybe select users maybe it's certain...