Licensing requirements to use Conditional access

Category: azure windowsazuread

Question

SubnetJO on Sat, 07 Jul 2018 17:21:00


Goodmorning
With some limitations, I managed to configure AAD Conditional Access to work checking the membership of a synchronized security group.
As for this article, Conditional Access need ADPremium license to work.

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-azure-portal

I just tested the Conditinal Access configuration, I just added  an E1 to my test account and everything is working fine!

My question is: Everything is working great, I really need an ADPremium license for conditional access to work?
Am I perhaps ina a sort of "grace period"?
If so, I need an ADPremium license only for each user I want to be managed by conditional access, or I need to add an ADPremium license to any Office365 user I have?

Thank you for your help

Replies

YASWANTHM-MSFT on Sun, 08 Jul 2018 12:53:06


Suggest you to refer the following table which describes the some of the license requirements that may be relevant. For a full list of license requirements, click here.

Note: When you are using Conditional access feature, all users covered under a policy must be covered by the appropriate licenses.

If you have an existing Enterprise Mobility and Security (EMS) subscription with Microsoft, you already have Azure AD Premium.

  • EMS E3 which includes Azure AD P1
  • EMS E5 which includes Azure AD P2.

When you purchase or activate Enterprise Mobility Suite, Azure AD Premium your directory is updated with the subscription, including its validity period(grace period) and prepaid licenses. Your subscription information, including status, next lifecycle event, and the number of assigned or available licenses is available through the Azure ARM portal under the Azure active directory Licenses tab for the specific directory. This is also to best place to manage your license assignments.

-----------------------------------------------------------------------------------------------

If this answer was helpful, click “Mark as Answer” or Up-Vote. To provide additional feedback on your forum experience, click here.

YASWANTHM-MSFT on Tue, 10 Jul 2018 13:18:02


Just checking in if you have had a chance to see our previous response. If this answers your query, do click “Mark as Answer” and Up-Vote for the same. And, if you have any further query do let us know.