This works well and has a lot of neat features, but most admins not super knowledgeable about the product shouldn't setup the more advanced ones until they feel comfortable with it. In my experience, this gets messy or annoying in a couple hypotheticals.. country based location filtering unfortunately seems to require location sharing which is extremely annoying. Once one starts to setup granular CA policies, it's like a fence around a house where every location or user group needs a set of boards for each application or however the policies are oriented. This makes for a messy set of error prone policies and one needs to spend a lot of time in the CA 'what if analyzer' to make sure they have every hypothetical login protected.
Amazing explanation. Thanks for your efforts 👍
This works well and has a lot of neat features, but most admins not super knowledgeable about the product shouldn't setup the more advanced ones until they feel comfortable with it.
In my experience, this gets messy or annoying in a couple hypotheticals.. country based location filtering unfortunately seems to require location sharing which is extremely annoying. Once one starts to setup granular CA policies, it's like a fence around a house where every location or user group needs a set of boards for each application or however the policies are oriented. This makes for a messy set of error prone policies and one needs to spend a lot of time in the CA 'what if analyzer' to make sure they have every hypothetical login protected.