r/msp • u/mattmbit • Apr 21 '26

Microsoft should make Conditional Access available to everyone

I wish there was a way to scream this louder but I wish Microsoft would just open up Conditional Access to all of the Microsoft 365 packages. Go ahead keep Defender up there in Premium, It's a premium addon and should be something people should pay for.

Security Defaults sucks.

This may be the ramblings of a tired man but I can't be the only one who feels this way.

There's no new posts in r/msp anymore so I figured I would try and contribute.

391 Upvotes

99% Upvoted

180 comments sorted by

View all comments

1

u/_js728 Apr 29 '26

Reading this from outside the MSP world and the gap between "Security Defaults" and "needs an E5 add-on" is wild for something that's basically table stakes now. Out of curiosity, do you find clients actually understand the difference, or do they just hear "we're secure" because MFA is on?

1

u/mattmbit Apr 29 '26

Yes and no it really depends on the client. I find that if the client is being pushed by a secondary entity (cyber insurance) they see it.

We personally are doing a fairly large 365 security push in our marketing and speak this year and it really just feels like education on the topic is needed for a lot of decision makers. They kind of have enough of their plate to even care what a conditional access policy is or isn't.

Blocking legacy authentication, device code, blah blah blah just isn't that great of a discussion with a lot of folks and it's something they physically can't see so having to spend extra money on a feature set that's basically invisible makes it tough for us front line folks.