Conditional access is a set of policies and configurations that control which devices have access to various services and data sources. Microsoft In the Microsoft environment, conditional access works with the Office 365 suite of products, as well as with SaaS apps which are configured in Azure Active Directory. The Microsoft option considers the following conditions; - User and Group - Who the user is and what groups they belong to in Azure AD. - Cloud Application requested - These are cloud applications protected by a Cloud application proxy. - Device State - Whether the device is managed or BYOD - Location (IP range) - Where the user is connecting from. - Client application - the type of application the user is connecting from (web app, mobile app, thick client, etc). - Sign in Risk - using Azure AD Identity Protection. Google Cloud Google Cloud Armour provides Geographic and IP based Access control which it calls "Geo-based Access Control".