ConceptConditional Access Policy / 条件访问 / CAP
Conditional Access Policy
An access control mechanism provided by Microsoft Azure AD/Entra ID. Administrators can define access policies based on conditions such as user identity, device state, and location to enforce MFA requirements or restrict access to specific resources. It is a key component of the Zero Trust security model.