sysop@hub:~/explainers/conditional-access-simulator$

conditional-access-simulator

Choose how a user signs in, switch policies on and off, and see what Conditional Access would do. A simplified model for learning, not a replacement for testing in your own tenant.

result

policies

Real policies have many more conditions and controls. All matching policies apply together, and a block wins over a grant. In your own tenant, use report-only mode and the What If tool under Conditional Access to test policies. Policies marked P2 need Microsoft Entra ID P2 for Identity Protection.

Related: How Conditional Access works Entra ID hardening checklist AADSTS53003 AADSTS53000