Conditional Access Review Checklist

Status: Planned

This project will create a practical review checklist for Microsoft Entra Conditional Access policies.

Planned scope

• Policy purpose and business requirement
• Included and excluded users, groups, applications, platforms, and locations
• Grant and session controls
• Report-only testing and sign-in log validation
• Emergency access account protections
• Change approval, pilot testing, rollback, and post-change verification

The public version will use a lab tenant or mock examples. It will not reproduce employer policies, exclusions, tenant details, or security-sensitive configurations.