Skip to content

Commit b8d2eae

Browse files
authored
Updated Phase 2 Grant Controls List Formatting
Updated conditional access phase 2 grant control list formatting to better reflect the ordered nature of the list. Since the list represents an order of precedence in operations, using alphabetical or numbered list bullets helps emphasize this.
1 parent 0cc326b commit b8d2eae

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

articles/active-directory/conditional-access/concept-conditional-access-policies.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -36,14 +36,14 @@ All policies are enforced in two phases:
3636
- Use the session details gathered in phase 1 to identify any requirements that haven't been met.
3737
- If there's a policy that is configured to block access, with the block grant control, enforcement will stop here and the user will be blocked.
3838
- The user will be prompted to complete more grant control requirements that weren't satisfied during phase 1 in the following order, until policy is satisfied:
39-
- [Multi-factor authentication​](concept-conditional-access-grant.md#require-multi-factor-authentication)
40-
- [Device to be marked as compliant](./concept-conditional-access-grant.md#require-device-to-be-marked-as-compliant)
41-
- [Hybrid Azure AD joined device](./concept-conditional-access-grant.md#require-hybrid-azure-ad-joined-device)
42-
- [Approved client app](./concept-conditional-access-grant.md#require-approved-client-app)
43-
- [App protection policy](./concept-conditional-access-grant.md#require-app-protection-policy)
44-
- [Password change](./concept-conditional-access-grant.md#require-password-change)
45-
- [Terms of use](concept-conditional-access-grant.md#terms-of-use)
46-
- [Custom controls](./concept-conditional-access-grant.md#custom-controls-preview)
39+
1. [Multi-factor authentication​](concept-conditional-access-grant.md#require-multi-factor-authentication)
40+
2. [Device to be marked as compliant](./concept-conditional-access-grant.md#require-device-to-be-marked-as-compliant)
41+
3. [Hybrid Azure AD joined device](./concept-conditional-access-grant.md#require-hybrid-azure-ad-joined-device)
42+
4. [Approved client app](./concept-conditional-access-grant.md#require-approved-client-app)
43+
5. [App protection policy](./concept-conditional-access-grant.md#require-app-protection-policy)
44+
6. [Password change](./concept-conditional-access-grant.md#require-password-change)
45+
7. [Terms of use](concept-conditional-access-grant.md#terms-of-use)
46+
8. [Custom controls](./concept-conditional-access-grant.md#custom-controls-preview)
4747
- Once all grant controls have been satisfied, apply session controls (App Enforced, Microsoft Defender for Cloud Apps, and token Lifetime)
4848
- Phase 2 of policy evaluation occurs for all enabled policies.
4949

0 commit comments

Comments
 (0)