security

Entra ID password protection: what it does not block

Conditional Access named locations: what trust really does

Conditional Access authentication strength: who it blocks and why

Conditional Access device filter: why yours matches nothing, and what it cannot protect

An unregistered device has null for every property, so a positive operator can never match it. The mode and operator pairs that hold, and the ones that quietly let devices past.

Conditional Access policy design: the failure modes the documentation leaves out