Do I need Microsoft Entra P1/P2 for a Hexnode conditional access email?Solved

Hi @shirleyc,

Microsoft Entra Conditional Access policies generally require the appropriate Microsoft Entra ID licensing. Entra ID P1 is commonly required for standard Conditional Access policies, while P2 is typically needed for advanced risk-based scenarios.

However, the licensing requirement applies only if you are actually configuring and enforcing Conditional Access policies in Microsoft Entra ID or through the Hexnode Microsoft Entra ID integration.

If the email was a general notification and you do not currently have any Conditional Access policies applied to users or devices, no immediate action is required. It will not affect enrolled devices or normal device management in Hexnode. You can verify this by checking:

1. Hexnode portal > Admin > Microsoft Entra ID.
2. Open the configured Microsoft Entra ID integration.
3. Check the Conditional Access section.
4. Confirm whether any policy is configured or scoped to users/devices.

You may also check the Microsoft Entra admin center to confirm that no Conditional Access policies are enabled or targeting your users.

Regards,
Isabel Lora
Hexnode UEM

That helps. So the integration being present alone does not mean Conditional Access is active, right?

Correct. Having Microsoft Entra ID integrated with Hexnode does not automatically mean Conditional Access is being enforced.

Conditional Access becomes relevant only when a policy is created, enabled, and scoped to specific users, groups, apps, or device conditions. If no Conditional Access policy is configured or applied, the generic email can be disregarded.

Your enrolled devices and device management workflows will continue to work as usual. If you decide to implement Conditional Access later, review the Microsoft Entra licensing requirements before enabling the policies.

Regards,
Isabel Lora
Hexnode UEM