Microsoft Adds Migration Help for Older Azure Active Directory Conditional Access Policies -- Redmondmag.com

Microsoft Adds Migration Help for Older Azure Active Directory Conditional Access Policies

By Kurt Mackie
10/23/2017

Microsoft issued a reminder today that IT pros should switch Azure Active Directory conditional access policies that were created using the "classic" Azure portal to policies supported by the new Azure Portal.

The new Azure Portal is also known as the "Azure Active Directory Admin Center." It now has a couple of features to help with the transition, according to Microsoft's announcement. For instance, the new Azure Portal will show the policies that were created using the "classic Azure portal, Intune Silverlight portal, and the Intune App Protection portal." Moreover, Microsoft has added a new "disable option for each classic policy."

IT pros should create new Azure AD conditional access policies using the new Azure Portal and then delete their older conditional access policies created with the old Azure Portal. The announcement suggested that organizations can use the newly added features in the new Azure Portal to "migrate on a timeline that works best for you."

Conditional access is an access control scheme for client devices. It permits access to network resources based on meeting conditions set by IT pros.

The reason to make the switch is that the Azure AD conditional access policies that IT pros may have created using the classic Azure Portal will continue to function alongside any policies created with the new Azure Portal. Here's how Microsoft characterized that scenario in this "Best Practices" document:

"Both policies [created by the new and old portals] are enforced by Azure Active Directory and the user gets access only when all requirements are met."

There's another motivation to perform the switch. Microsoft suggested that "the new policies enable you to address scenarios you could not handle with classic policies," according to this "Migration" document.

Microsoft's reminder comes about four months after Microsoft first enabled conditional access policies within the new Azure Portal. Microsoft is planning to put an end to support for its classic Azure Portal, starting on Nov. 30. The old Azure portal will be deprecated, meaning that it won't get developed or patched by Microsoft.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

Using Configuration Files to Control PowerShell Scripts, Part 2: Building Blocks

Learn how to use PowerShell's GUI capabilities to dynamically create configuration files that enhance script flexibility and usability.
U.S. House Leaders Unveil Bipartisan Strategy for AI Governance and Innovation

On Tuesday, U.S. House Speaker Mike Johnson and Democratic Leader Hakeem Jeffries received the final report from the bipartisan House Task Force on Artificial Intelligence, which outlines essential principles and recommendations to bolster American leadership in AI.
Using Configuration Files to Control PowerShell Scripts, Part 1: The Basics

Learn how to use JSON configuration files to make PowerShell scripts more dynamic, flexible and user-friendly.
Exchange Online Receiving Enhanced Message Trace

Microsoft has announced the public preview of its enhanced Message Trace feature in the Exchange admin center (EAC) for Exchange Online.
Major Microsoft Multifactor Authentication Vulnerability Revealed

A vulnerability in Microsoft’s multifactor authentication (MFA) system has been uncovered by cybersecurity firm Oasis Security, allowing attackers to bypass security measures and access sensitive data across services including Outlook, OneDrive, Teams and Azure.