Skip to content
← Back to the guide

Entra ID authentication contexts

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 4

Entra ID authentication contexts

Authentication contexts let Conditional Access trigger step-up authentication for specific actions, not just specific apps.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-authentication-contexts

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 4
01

What is an authentication context in Conditional Access?

A tag that an app or resource — a SharePoint site with a sensitivity label, a PIM role activation, a step in a custom app — can demand, which triggers the Conditional Access policy attached to that context. It lets one…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-authentication-contexts

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 4
02

How do authentication contexts work with sensitivity labels?

A sensitivity label applied to a SharePoint site can reference an authentication context; opening the site then requires whatever the linked Conditional Access policy demands (MFA, compliant device, a blocked location).…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-authentication-contexts

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 4
03

Do authentication contexts need a licence?

Entra ID P1 for Conditional Access; the sensitivity label integration uses standard Purview licensing; PIM use needs P2.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-authentication-contexts

Slide 4Download PNG

Auto-generated from Entra ID authentication contexts. This page is not indexed and isn't part of the guide itself.