M365 Tips for Azure Conditional Access

Just a quick tip when designing and setting up Conditional Access for Azure and 365 is to not go straight for the block all design.

In the long run this may trip you up by locking your self out of Azure and M365 or when it comes to allowing a function but blocking another as all polices apply to users / device / locations that fall within its scope and a block over rides an allow.

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/best-practices