Designing conditional access policies

When designing conditional access policies for mobile devices, you're trying to find the most appropriate configuration in order to implement corporate policy within Azure AD and Intune. There are many customizations for conditional access policies, including using everything we've discussed that can make a device compliant (or not) as a condition.

When you create a policy, you're presented with two sets of settings:

• Assignments:
  
  • Users and groups
  • Cloud apps or actions
  • Conditions
• Access controls:
  • Grant
  • Session