What is Conditional access?
In short:Conditional access applies rules at sign-in based on context such as device, location and risk. Microsoft Entra extends Conditional Access to agents. It decides whether an agent can get a token, but it does not check each action the agent takes after that point.
How does it work?
When the agent requests a token, the identity provider evaluates policy and grants, blocks or adds conditions.
What does it look like in practice?
An Entra policy blocks an agent from getting tokens outside the corporate network.