Create a Conditional Access Session Control Policy
Mike Miller
23 steps
43 seconds
Microsoft Entra
1
Navigate to [https://entra.microsoft.com/#view/Microsoft_AAD_ConditionalAccess/ConditionalAccessBlade/~/Policies](https://entra.microsoft.com/#view/Microsoft_AAD_ConditionalAccess/ConditionalAccessBlade/~/Policies)
2
Click "New Policy"
3
Name your policy
4
Click "0 users and groups selected"
5
Click "Select users and groups"
6
Click "Users and groups"
7
Find and select your desired group
8
Click "Select"
9
Click "Exclude"
10
Click "Users and groups"
11
Find and select your break glass account
12
Click "Select"
13
Click "No cloud apps, actions, or authentication contexts selected"
14
Click "Select apps"
15
Click "None"
16
Find and select your desired app(s)
17
Click "0 controls selected"
18
Click "Use Conditional Access App Control"
19
Click "Monitor only (Preview)"
20
Click "Use custom policy..."
21
Click "Select"
22
Click "On"
23
Click "Create"
Create a Conditional Access Session Control Policy
Mike Miller
23 steps
43 seconds
Microsoft Entra
1
Navigate to [https://entra.microsoft.com/#view/Microsoft_AAD_ConditionalAccess/ConditionalAccessBlade/~/Policies](https://entra.microsoft.com/#view/Microsoft_AAD_ConditionalAccess/ConditionalAccessBlade/~/Policies)
2
Click "New Policy"
3
Name your policy
4
Click "0 users and groups selected"
5
Click "Select users and groups"
6
Click "Users and groups"
7
Find and select your desired group
8
Click "Select"
9
Click "Exclude"
10
Click "Users and groups"
11
Find and select your break glass account
12
Click "Select"
13
Click "No cloud apps, actions, or authentication contexts selected"
14
Click "Select apps"
15
Click "None"
16
Find and select your desired app(s)
17
Click "0 controls selected"
18
Click "Use Conditional Access App Control"
19
Click "Monitor only (Preview)"
20
Click "Use custom policy..."
21
Click "Select"
22
Click "On"
23
Click "Create"
