Octiga Generic Conditional Access Policy

Generic placeholder for custom Conditional Access Policies.

Adding a baselineAdd, configure or remove a single baseline on a tenant, a user or a group, without deploying a whole scheme.→

Configure it

Add this baseline when you want Octiga to track a Conditional Access policy of your own design, one that doesn’t match any of Octiga’s named Conditional Access baselines.

1. Add the baseline to the tenant directly (see Adding a baseline), or carry it in a scheme you deploy to every tenant you manage (see Deploying a scheme).

2. Set each field to match the policy your organisation needs; this baseline has no fixed field list. Conditional Access policies on Microsoft Learn explains what each condition and control does.

3. Save.

   Turn on Auto-remediation if you want Octiga to reapply the policy whenever it’s changed in Microsoft 365.

Licence: Entra ID P1 or P2

This baseline needs Entra ID P1 or P2 on the tenant. Without it, Octiga excludes the baseline rather than reporting it as deviated — see Licence requirements.

Check it worked

Because this baseline has no fixed settings, Passing means the policy you configured still exists in Microsoft Entra as you set it. After the next sync, confirm it matches what you intended in the Microsoft Entra admin centre under Entra ID > Conditional Access > Policies. What end users notice depends on what the policy requires or blocks.

Standards this addresses

CISv8 6.5v8 4.1

NISTPR.AC-1AC-3

ISO 27001A.8.2A.8.3

Doing this for every tenant?

Step through the deploy wizard to apply a scheme to a tenant, groups or users, and see what Managed and Direct do at deploy time.

Deploying a scheme→