The complete Microsoft Defender for Cloud Apps product comes with all the bells and whistles for MDCA, including expanding app controls to any cloud or on-premises app.Additionally, an Azure AD Premium P1 subscription is required to configure Azure AD Conditional Access policies used for app control. The next step up is Office 365 Cloud App Security, which includes Conditional Access App Control for Office 365 apps only – as this SKU is part of Office 365 E5.The entry level Azure AD Cloud App Discovery comes with an Azure AD Premium P1 subscription and only supports the Cloud App Discovery functionality however, It doesn’t cover the App Control aspects described here.

Licensing for MDCAįull licensing details for MDCA are available online, but at a high level, three different SKUs for MDCA are available (excluding the US Government offerings): In this article, I explore how MDCA can help secure common remote access scenarios using Conditional Access App Control Policies. There are many ways you can utilize MDCA, from monitoring and preventing data leaks to providing valuable insights into what’s happening in your cloud service. It sits between your users and your cloud apps to provide visibility, protection, and compliance in the cloud where traditional methods like firewalls may not be practical. Microsoft Defender for Cloud Apps (MDCA), previously known as Microsoft Cloud App Security, is a Cloud Access Security Broker (CASB). What is Microsoft Defender for Cloud Apps?

Configuring Conditional Access Policies.

What is Microsoft Defender for Cloud Apps?.

Office 365 applications explained