Compliant Network

Compliant network in Microsoft Entra Conditional Access is a location condition requiring sign-ins to come through a known corporate network egress — typically Microsoft Entra Global Secure Access or a configured named location. Used to enforce that access to sensitive resources requires the user to be on (or routed through) corporate network paths, rather than allowing direct internet access. Particularly useful for legacy applications that lack modern security controls — the network-side gate provides defence-in-depth. With Entra Internet Access (part of Global Secure Access), compliant network conditions are evaluated at the cloud edge, not the user's device. Combined with device compliance and MFA, compliant network provides multi-factor zero-trust gating.