From 02cb77cf35e31fd154823e0a92ca8165cf68e6b5 Mon Sep 17 00:00:00 2001 From: Tim Larson <50213291+tilarso@users.noreply.github.com> Date: Thu, 26 Feb 2026 13:25:17 -0600 Subject: [PATCH] Add question about Conditional Access in account recovery --- .../authentication/self-service-account-recovery.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/docs/identity/authentication/self-service-account-recovery.yml b/docs/identity/authentication/self-service-account-recovery.yml index 573c1a2dced..378ff9b4a8e 100644 --- a/docs/identity/authentication/self-service-account-recovery.yml +++ b/docs/identity/authentication/self-service-account-recovery.yml @@ -58,10 +58,16 @@ sections: > To estimate costs and potential savings, use the cost savings calculator in account recovery in the Microsoft Entra admin center. > Enter your current helpdesk costs, target user count, and the cost per verification from your chosen provider. > The calculator compares your current spending with projected self-service recovery costs, so you can easily model savings for your scenario. + - question: | + Do my Conditional Access policies apply during the account recovery flow? + answer: | + > Yes. Conditional Access policies in your tenant can apply to the account recovery flow. + > If a policy blocks access or requires controls (for example, compliant device, trusted location, or multifactor authentication), the user’s recovery attempt might be interrupted or blocked. + > Review and test your Conditional Access policies with a small set of users before you roll out account recovery more broadly. - name: Identity Verification Provider selection and usage questions: - question: | Can I bring my own Identity verification provider and contract to Microsoft Entra ID account recovery? answer: | - > Microsoft Entra ID account recovery only supports reviewed and approved providers through Microsoft Security Store. \ No newline at end of file + > Microsoft Entra ID account recovery only supports reviewed and approved providers through Microsoft Security Store.