Prevent Conditional Access bypass with Restricted Management Administrative Units in Entra ID

Check out this article via web browser: Prevent Conditional Access bypass with Restricted Management Administrative Units in Entra ID

Bypassing Conditional Access is easy. That’s because most Conditional Access policies rely on Entra ID Security Groups. Since Entra ID is very “flat” by default, every admin with group management permissions can add or remove members to ANY group. That’s why we want to handle our include and exclude groups carefully. This idea does not… 

The post Prevent Conditional Access bypass with Restricted Management Administrative Units in Entra ID appeared first on JanBakker.tech.