diff --git a/docs/identity/authentication/self-service-account-recovery.yml b/docs/identity/authentication/self-service-account-recovery.yml index 573c1a2dced..378ff9b4a8e 100644 --- a/docs/identity/authentication/self-service-account-recovery.yml +++ b/docs/identity/authentication/self-service-account-recovery.yml @@ -58,10 +58,16 @@ sections: > To estimate costs and potential savings, use the cost savings calculator in account recovery in the Microsoft Entra admin center. > Enter your current helpdesk costs, target user count, and the cost per verification from your chosen provider. > The calculator compares your current spending with projected self-service recovery costs, so you can easily model savings for your scenario. + - question: | + Do my Conditional Access policies apply during the account recovery flow? + answer: | + > Yes. Conditional Access policies in your tenant can apply to the account recovery flow. + > If a policy blocks access or requires controls (for example, compliant device, trusted location, or multifactor authentication), the user’s recovery attempt might be interrupted or blocked. + > Review and test your Conditional Access policies with a small set of users before you roll out account recovery more broadly. - name: Identity Verification Provider selection and usage questions: - question: | Can I bring my own Identity verification provider and contract to Microsoft Entra ID account recovery? answer: | - > Microsoft Entra ID account recovery only supports reviewed and approved providers through Microsoft Security Store. \ No newline at end of file + > Microsoft Entra ID account recovery only supports reviewed and approved providers through Microsoft Security Store.