We'll begin with a review of Conditional Access policy fundamentals: the signals available (device compliance, sign-in risk, location, application context) and how they combine into policy decisions. The core of the session focuses on integrating these identity signals with network-layer boundaries — using Named Locations to align Conditional Access decisions with your network topology, and understanding how this integration changes the security calculus compared to network controls alone.

We'll also cover Continuous Access Evaluation (CAE), which allows access to be revoked in near real-time when risk conditions change — a critical capability for reducing the window of exposure after a credential compromise. The session concludes with a live demo showing an adaptive access policy in action: blocking a risky sign-in attempt based on the combination of identity risk score and network context.