What does Conditional Access assess using Azure Active Directory (Azure AD) Identity Protection?

Conditional Access using Azure Active Directory (Azure AD) Identity Protection focuses on assessing user risk to make informed access decisions. User risk is determined by analyzing various signals, such as sign-in behaviors, credential leaks, and risk detections that suggest a user's account may be compromised. By evaluating the risk associated with a user, organizations can enforce specific policies that allow or deny access to resources, enhancing security while providing appropriate accessibility based on the assessed risk level.

The assessment of user risk is crucial because it prioritizes safeguarding sensitive information and resources based on individual context rather than solely on factors like group membership or device compliance. While those factors may play a role in broader access control strategies, they are not the primary focus of conditional access assessments in this context.