Boost SharePoint Security Using Conditional Access Policies
Matthew Tinney
A Focused, Compassionate Visionary, Father of Twin Boys. We help Information Technology engineering teams solve for problems they don't have the DNA to solve because they don't have the people, technology or process.
WME is a steadfast Microsoft collaborator that delivers top-tier Microsoft solutions and expert services. We strive to empower businesses to protect their SharePoint environments. We help them harness Microsoft Entra ID to further strengthen their SharePoint’s efficiency. Ultimately, we ensure that only authorised users can access your critical data.
Implementing Authentication Contexts with WME
We strengthen SharePoint security by seamlessly integrating Microsoft Entra Conditional Access policies. We customize these policies to specific sites/sensitivity labels. And, ultimately create an impenetrable firewall against illegal access.
Requirements & Licensing for authentication contexts for SharePoint
Your organization need to have one of the following licenses to utilize this innovation:
Addressing Compatibility Concerns
We rigorously test your apps/workflows under authentication context conditions.
However, some known limitations still exist:
? Older Office app versions
? Viva Engage
? Teams web app & OneNote app integration with Teams channels
? Teams meeting recordings & webinar scheduling
? SharePoint folder renaming in Teams
? Third-party apps & OneDrive sync
? Visualize SharePoint List in Power BI feature
? Outlook communication with authenticated SharePoint sites
? Multi-file download with session control & conditional access
WME’s Expert Setup of Authentication Contexts
Let’s Set Up an Authentication Context…
?? Find your way: Head over to Microsoft Entra Conditional Access. Look for “Authentication context.”
?? Start fresh: Click “New authentication context” to begin.
领英推荐
?? Add the details: Give your context a clear name and description. Don’t forget to check “Publish to apps.”
?? Save it up: Hit save to finalize your new authentication context.
Creating A Conditional Access Policy
Our team will guide you through creating a personalized conditional access policy:
?? Get started: Create a new policy in Microsoft Entra Conditional Access.
?? Name it: Give your policy a clear, easy-to-remember name.
?? Choose your users: Select “Guest or external users” and then pick “B2B collaboration guest users.”
?? Set the conditions: Under “Cloud apps or actions,” choose “Authentication context.” Now, select the context you created.
?? Grant access: On the “Grant” tab, decide on the terms of use. Now, turn on the policy.
Applying Authentication Contexts
Direct Application to SharePoint Sites…
WME can directly apply authentication contexts using PowerShell / Sensitivity Labels
We’ll help you strengthen security by setting up sensitivity labels with authentication contexts:
?? Find your label: Edit an existing sensitivity label. Or, create a new one in the Microsoft Purview compliance portal.
?? Set the sharing rules: Select “External sharing and Conditional Access settings.”
?? Enable protection: On the “Define external sharing and device access settings” page, turn on “Use Microsoft Entra Conditional Access to protect labelled SharePoint sites.”
?? Choose wisely: Pick the right authentication context for your needs. Now, save the label.