Conditional Access

Find device code sign-ins and test a Conditional Access block before enforcing it.

Sign-in Frequency (SIF) is a commonly misunderstood control, one many orgs use to inflict unnecessary suffering on their employees 😩 It probably doesn’t work the way you think it does and is often used in less than ideal ways… So let’s look at how it works and when to use it. Original documentation excerpt introducing sign-in frequency and the risks of repeatedly asking users for credentials. Historical November 2025 documentation screenshot. Its broad session-revocation wording must not be treated as a guarantee for every application; use current, qualified guidance.

Keep admin sessions separate while allowing device-based Conditional Access checks.

Quick tip on using workbooks to create KQL queries and get more data than provided by the workbook

Check how authentication and policy requirements combine before treating a blocked sign-in as resolved.

Block unknown client platform claims with a carefully tested Conditional Access policy.