An Azure AD Conditional Access Policy to block CorpServiceAccounts with High Sign-in Risk.
Suggested name:
CA8{XX}-CorpServiceAccounts-IdentityProtection-AllApps-HighSigninRisk-Block
Assignments
Users
Users and groups |
|
Include users |
CA-Persona-CorpServiceAccounts |
Exclude users |
Break-glass (emergency access) accounts |
Cloud apps or actions
Cloud apps |
|
Include |
All cloud apps |
Conditions
Access controls
Block Access |
No additional control selection |
References
https://learn.microsoft.com/en-us/azure/architecture/guide/security/conditional-access-architecture
https://learn.microsoft.com/en-us/azure/architecture/guide/security/conditional-access-framework
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policy-common