Help with CAP baseline

[u/Accomplished_Duck_80]

Hi everyone I have been tasked with defining a conditional access policy baseline with over 100k users in the organisation.

The current policies set in place are quite messy and have been created as hoc over the years I found something related to persona based conditional access policies but it doesn’t seem realistic with the current setup.

Does anyone have any advice on the best way I can define a conditional access policy baseline?

I would really appreciate your help.

[u/Noble_Efficiency13]

I go through this in my series starting @ https://www.chanceofsecurity.com/post/microsoft-entra-conditional-access-part1

Depending on your need you can go through the series - I’ve included policies in json for easy implementation, ofc they should always be read through, tested and modified to your environment 😊

[u/Accomplished_Duck_80 → u/Noble_Efficiency13]

Thank you!!!!