Skip to content
← Back to the guide

Testing Conditional Access policies

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 4

Testing Conditional Access policies

How to test Conditional Access policies before enforcing them — report-only mode, what-if, and rollout patterns.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/conditional-access-testing

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 4
01

How do I test a Conditional Access policy before turning it on?

Create it in report-only mode and leave it for a week; then read the Report-only tab of sign-ins in the Entra sign-in logs and the Conditional Access Insights workbook to see which sign-ins would have been blocked or pr…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/conditional-access-testing

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 4
02

What is the What If tool in Conditional Access?

What If simulates a sign-in for a chosen user, app, platform, location, and risk level and shows which policies would apply and what controls they would demand. It evaluates policy logic, not the user's actual devices o…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/conditional-access-testing

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 4
03

Why did my Conditional Access policy not apply to a sign-in?

Common reasons: the sign-in was non-interactive and reused an existing token; the user or app was in an exclusion; the client app condition did not match; the policy was still report-only; or the sign-in happened before…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/conditional-access-testing

Slide 4Download PNG

Auto-generated from Testing Conditional Access policies. This page is not indexed and isn't part of the guide itself.