Using Condition Access within Microsoft Entra ID (Azure) for your Federated Identity (FID) application

If you want to use Condition Access (CA) within Azure Entra ID to manage for example Multi-factor Authentication (MFA), you must be aware of some limitations. This document describes how you can setup CA with Azure Entra ID.

Steps when using SAML Protocol: 

• Login the Azure Portal and navigate to Microsoft Entra ID
• Beneath Manage click on Security
• Beneath Protect click on Conditional Access and click on the button: 'Create new policy'
• Provide a Logical name
• Users: Select the users or groups for which the policy needs to be active
• Target Sources: Select the option: 'Select apps' and select from the list the App Registration you have created for your application (Synergy/Globe+)
• Go to 'Access Controls' - Grant and click on the link: 'controls selected'
• Select Grant and enable the option: 'Require multifactor authentication'
• Make sure the at the bottom of the page you set 'Enable Policy' to On and click on the Create button.
• Now you have setup MFA using CA.

• Login the Azure Portal and navigate to Microsoft Entra ID
• Beneath Manage click on Security
• Beneath Protect click on Conditional Access and click on the button: 'Create new policy'
• Provide a Logical name
• Users: Select the users or groups for which the policy needs to be active
• Target Sources: Select must select the option: 'All cloud apps', you cannot select the app registration created for your application, because that will NOT work! *
• Go to 'Access Controls' - Grant and click on the link: 'controls selected'
• Select Grant and enable the option: 'Require multifactor authentication'
• Make sure the at the bottom of the page you set 'Enable Policy' to On and click on the Create button.
• Now you have setup MFA using CA.