Free, self-hosted M365 configuration drift monitoring. Baseline your tenant, detect changes at the property level, and restore in one click. For MSSPs and admins.
Free, open-source Microsoft 365 security assessment tool. Evaluates 54 findings across identity, CA, Exchange, Teams, SharePoint and Intune. Auto-remediates with rollback, generates professional reports, and simulates attack chains. Windows, local, no data leaves your machine.
PowerShell security reporting framework for Microsoft 365 identity posture assessment. Analyzes Authentication Context, PIM, Conditional Access & more.
CA-PowerToys is a set of tools to help you manage Conditional Access policies. It is a command line tool that can be used to export, import, and clean up Conditional Access policies and associated Groups, helping to implement a Policy-as-Code approach.
Tools to help implement Conditional Access Policies in Azure AD
This solution is designed for an Azure Runbook to assign users to two Entra ID (AzureAD) groups based on their MFA capability (capable / non-capable).
Sign-in a user with the Microsoft Identity Platform and call an ASP.NET web API that calls a downstream Web API with Conditional Access
Een leuk framework voor Conditional Access. In mijn Blogs kan je mijn beredenering volgen en een stukje instructie.🥰
Contains Entra Related PowerShell Scripts and Entra Related KQL for Logs in Log Analytics
You wonder how to manage your travelers ? In this scenario we describe how to manage them with Identity Governance and Conditional Access.
An interactive powershell script for Azure/Entra. Creates a set of conditional access policies that will provide improved security over Microsoft's "Security Defaults". This script is primarily for less mature orgs that are perhaps still using Microsofts "Security Defaults" or only have very basic conditional access policies in place.
Open-source security toolkit for M365 and other cloud platforms.
Sample on how to get Conditional Access Policies and Network Settings using API
PowerShell-only Microsoft 365 tenant baseline reporter using Microsoft Graph. Generates JSON + HTML posture outputs.
Sample policies to implement a Zero Trust User Access strategy using Entra ID Conditional Access
Simulate Microsoft Entra Conditional Access policy evaluation
Browser-only passkey readiness scanner for Microsoft Entra ID — PKCE-authenticated SPA that classifies users into 4 readiness tiers and flags Conditional Access blockers without sending tenant data anywhere
Deployment of Zero Trust, persona-based Azure AD Conditional Access Policies via Microsoft Graph, utilizing PowerShell.
Read-only PowerShell tool that audits Microsoft 365 tenants against CISA hardening recommendations issued after the Stryker Corporation cyberattack (March 2026). 20 security checks covering Entra ID, Intune, and Conditional Access with an executive HTML report.
Read-only Microsoft Entra ID (Azure AD) access review PowerShell scanner + Python report that scores MFA gaps, privileged roles, legacy auth, Conditional Access and PIM risks into an A–F posture report for ISO 27001 / NIS2 audits.
Add a description, image, and links to the conditional-access topic page so that developers can more easily learn about it.
To associate your repository with the conditional-access topic, visit your repo's landing page and select "manage topics."