# Octiga Generic Conditional Access Policy

> Generic placeholder for custom Conditional Access Policies.

Generic placeholder for custom Conditional Access Policies.

[Adding a baseline](https://docs.octiga.io/baselines/adding-a-baseline/) — Add, configure or remove a single baseline on a tenant, a user or a group, without deploying a whole scheme.

## Configure it

Add this baseline when you want Octiga to track a Conditional Access policy of your own design, one that doesn't match any of Octiga's named Conditional Access baselines.

1. Add the baseline to the tenant directly (see [Adding a baseline](https://docs.octiga.io/baselines/adding-a-baseline/)), or carry it in a scheme you deploy to every tenant you manage (see [Deploying a scheme](https://docs.octiga.io/baselines/deploying-a-scheme/)).
2. Set each field to match the policy your organisation needs; this baseline has no fixed field list. [Conditional Access policies](https://learn.microsoft.com/entra/identity/conditional-access/overview) on Microsoft Learn explains what each condition and control does.
3. **Save.** Turn on **Auto-remediation** if you want Octiga to reapply the policy whenever it's changed in Microsoft 365.

> **Licence: Entra ID P1 or P2:** This baseline needs Entra ID P1 or P2 on the tenant. Without it, Octiga excludes the baseline rather than reporting it as deviated — see [Licence requirements](https://docs.octiga.io/reference/licence-requirements/).

## Check it worked

Because this baseline has no fixed settings, Passing means the policy you configured still exists in Microsoft Entra as you set it. After the next sync, confirm it matches what you intended in the Microsoft Entra admin centre under **Entra ID > Conditional Access > Policies**. What end users notice depends on what the policy requires or blocks.

## Standards this addresses

### CIS

- **v8 6.5** — CIS Controls v8 Safeguard 6.5
- **v8 4.1** — CIS Controls v8 Safeguard 4.1

### NIST

- **PR.AC-1** — NIST CSF 2.0 PR.AC-1
- **AC-3** — NIST SP 800-53 AC-3

### ISO 27001

- **A.8.2** — ISO/IEC 27001:2022 Annex A.8.2
- **A.8.3** — ISO/IEC 27001:2022 Annex A.8.3

**Doing this for every tenant?** Step through the deploy wizard to apply a scheme to a tenant, groups or users, and see what Managed and Direct do at deploy time. [Deploying a scheme](https://docs.octiga.io/baselines/deploying-a-scheme/)