conditional-access.md

title	titleSuffix	description	keywords	author	ms.author	manager	ms.date	ms.topic	ms.service	ms.localizationpriority	ms.technology	ms.assetid	ms.suite	search.appverid	ms.custom	ms.collection
Conditional Access with Microsoft Intune	Microsoft Intune	Learn how to define the conditions users, devices, and apps must meet to access company resources in Microsoft Intune.		brenduns	brenduns	dougeby	03/06/2018	conceptual	microsoft-intune	high		a1973f38-ea55-43eb-a151-505fb34a8afb	ems	MET150	intune-azure; get-started	M365-identity-device-management

Learn about Conditional Access and Intune

[!INCLUDE azure_portal]

Conditional Access refers to ways you can control the devices and apps that are allowed to connect to your email and company resources. In this topic, learn about device-based and app-based Conditional Access, and find common scenarios for using Conditional Access with Intune.

Enterprise Mobility + Security (EMS) Conditional Access is not a standalone product, it’s a solution that takes part on all services and products that are part of the EMS. It provides granular access control to keep your corporate data secure, while giving users an experience that allows them to do their best work from any device, and from any location.

You can define conditions that gate access to your corporate data based on location, device, user state, and application sensitivity.

Note

Conditional Access also extends its capabilities to Office 365 services.

Use Conditional Access with Intune

Conditional Access is an Azure Active Directory capability that is included with an Azure Active Directory Premium license. Intune enhances this capability by adding mobile device compliance and mobile app management to the solution.

Ways to use Conditional Access with Intune:

• Device-based Conditional Access

  • Conditional Access for Exchange on-premises

  • Conditional Access based on network access control

  • Conditional Access based on device risk

  • Conditional Access for Windows PCs

    • Corporate-owned

    • Bring your own device (BYOD)

• App-based Conditional Access

Next steps

Common ways to use Conditional Access with Intune