Risk-based Conditional Access

Start with a report-only baseline for Microsoft Entra risk-based Conditional Access.

Before you start

• Review the documented prerequisites and required permissions before deployment.
• Conditional Access begins in report-only mode.

Quick start

Use the reviewed commands below. See the repository documentation for prerequisites and detailed setup.

azd init -t nathanmcnulty/azd-risk-based-ca
azd up

Deployment details

• Shape: standalone
• Source: 1ad0c0d623cbeb14187610c2224c91bbeab905d0
• Reviewed documentation: Source

Optional features

• Optional Graph and Log Analytics notification routes.

These are documentation facts, not permission approval or proof of deployment or notification delivery.

Template details

• Repository: azd-risk-based-ca
• Tags: Microsoft Entra ID, Conditional Access, Identity Protection, Microsoft Graph, Azure Developer CLI
• Language: PowerShell
• Updated: Oct 15, 2026
• Variants: 1

Highlights

• Begins in report-only mode
• Includes a guided migration path
• Supports optional Teams notifications

Notes

This guide page combines display metadata and separately reviewed source facts for azd-risk-based-ca.