diff --git a/conditional-access-policies.md b/conditional-access-policies.md new file mode 100644 index 0000000..14ece17 --- /dev/null +++ b/conditional-access-policies.md @@ -0,0 +1,35 @@ +# Microsoft-Managed Conditional Access Policies (CAPs) in Entra ID + +Microsoft has introduced Conditional Access policies (CAPs) that may affect your sign-in experience. These policies enforce additional security checks based on detected risks. + +If additional verification is required, you may be asked to: +- Perform multifactor authentication (MFA) again. +- Reauthenticate even if you are already signed in. + +This helps protect your account from potential threats. + +--- + +## What to do if prompted for additional authentication + +- Complete the MFA prompt or reauthentication as instructed. +- If you face issues or believe the prompt was triggered incorrectly, contact the Support Team. + +Tips to ensure smooth access: +- Keep your authentication methods up to date. +- Use trusted devices and networks where possible. + +--- + +## Summary of Actions + +| Policy | Action | +| :----- | :----- | +| Risky sign-in MFA | Enable in Production in April 2025 release. Exclude root accounts. | +| Admin portal MFA | Turn off Microsoft CAP. Update internal "Require Admin MFA" CAP to cover new roles. | + +--- + +For more information, refer to the [Microsoft Message Center](https://aka.ms/m365messagecenter). + +If you need help, raise a [service request](https://go.gov.sg/seed-techpass-support). diff --git a/docs/_sidebar.md b/docs/_sidebar.md index fcac50c..0fefda1 100644 --- a/docs/_sidebar.md +++ b/docs/_sidebar.md @@ -21,6 +21,7 @@ - **TechPass support resources** - [TechPass status](/support/techpass-status.md) - [Raise a service request](raise-a-service-request) + - [Conditional Access Policies](conditional-access-policies) - [FAQs](/support/overview) - [Terms and policies](terms-and-policies) - [Glossary](glossary)