09/04/2026
Your Microsoft 365 accounts can accept login attempts from anywhere in the world by default.
If your business only operates in Canada, why allow login attempts from everywhere else?
With Conditional Access, you can block sign-ins from countries you don't do business in. Even if someone has the correct password, they won't get in.
It's not foolproof, but it can stop a huge amount of the automated attacks hitting Microsoft 365 accounts every day.
Most cyberattacks aren't sophisticated. They're opportunistic. Reducing the number of places attackers can access your environment from is a simple way to reduce risk.