Top things that you might not be doing (yet) in Entra Conditional Access

A best-practices guide to strengthening Microsoft Entra ID (Azure AD) security with Conditional Access: enforce strong MFA for all and guest users (leveraging cross-tenant access where appropriate), block legacy authentication, tune sign-in frequency and session persistence, restrict sensitive actions (security info registration and device join/registration), harden service accounts (user-based, service principals with CA and risk-based controls, and managed identities), and integrate Identity Protection risk signals—while noting licensing requirements (P1/P2) and the migration to the unified Authentication Methods policy.