Creating Conditional Access policies after disabling security defaults

Question

We have newly introduced Microsoft Intune and Entra ID in our company, and we are trying to create Conditional Access policies. However, when creating them, we are prompted to disable the security defaults.

Is it possible to replace the security defaults with the policies listed under the "Secure foundation" template in the "Conditional Access Templates" section?

https://learn.microsoft.com/ja-jp/entra/identity/conditional-access/concept-conditional-access-policy-common?tabs=secure-foundation#template-categories

Answer 1

Hello nakashima,

Thanks for your question.

Security defaults are baseline pre-configured security settings available to everyone.

Organizations that choose to implement Conditional Access policies that replace security defaults must disable security defaults.

Yes, it is possible to replace the security defaults with the policies listed under the "Secure foundation" template in the "Conditional Access Templates" section like the documentation you provided

Once you configure these conditional access policies you can test them in report-only before rolling out to all your users.

Please let me know if you have further questions

You can mark it 'Accept Answer' if this helped.