| Service | Microsoft Docs article | Related commit history on GitHub | Change details |
|---|---|---|---|
| SharePoint | Authentication Context Example | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/authentication-context-example.md | Title: "Manage site access based on sensitivity label" + Title: "Conditional access policies for SharePoint sites" search.appverid: description: "Learn about how to use Azure Active Directory conditional access and authentication context with SharePoint sites and sensitivity labels." -# Manage site access based on sensitivity label +# Conditional access policies for SharePoint sites -With [Azure Active Directory authentication context (preview)](/azure/active-directory/conditional-access/concept-conditional-access-cloud-apps#configure-authentication-contexts), you can enforce more stringent access conditions when users access SharePoint sites that have a sensitivity label applied. +With [Azure Active Directory authentication context](/azure/active-directory/conditional-access/concept-conditional-access-cloud-apps#configure-authentication-contexts), you can enforce more stringent access conditions when users access SharePoint sites. You can directly apply an authentication context to a SharePoint site by using the [Set-SPOSite](/powershell/module/sharepoint-online/set-sposite) PowerShell cmdlet. -Authentication contexts are used with sensitivity labels to connect [Azure AD conditional access policies](/azure/active-directory/conditional-access/overview) to labeled sites. +In the following example, an authentication context called MFA is attached to the site. -> [!NOTE] -> If you don't use sensitivity labels with SharePoint sites, you can directly apply an authentication context to a SharePoint site by using the [Set-SPOSite](/powershell/module/sharepoint-online/set-sposite) PowerShell cmdlet. -> This capability can't be applied to the root site in SharePoint (for example, https://contoso.sharepoint.com). +```powershell +Set-SPOSite -Identity https://contoso.sharepoint.com/sites/research -ConditionalAccessPolicy AuthenticationContext -AuthenticationContextName "MFA" +``` +Additionally, authentication contexts are used with sensitivity labels to connect [Azure AD conditional access policies](/azure/active-directory/conditional-access/overview) to labeled sites. ++Note that this capability can't be applied to the root site in SharePoint (for example, https://contoso.sharepoint.com). ## Requirements Some apps do not currently work with authentication contexts. If you have Office - Copy or Move files from Site-A(no policy) to Site-B(with policy) fails Using authentication context with SharePoint sites requires at least one of the below licenses:-- Office 365 E5-- Office 365 A5 for faculty-- Office 365 A5 for students - Microsoft 365 E5 - Microsoft 365 E5 Compliance - Microsoft 365 E5 Information Protection and Governance-- Microsoft 365 Security And Compliance For FLW-- Microsoft 365 A5 for faculty-- Microsoft 365 A5 for students+ ## Setting up an authentication context |
| SharePoint | Change Your Sharepoint Domain Name | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/change-your-sharepoint-domain-name.md | ms.assetid: 576325ad-8c40-4fe8-8a63-68c3b7d536cf description: "Learn about changing the domain name in your SharePoint and OneDrive URLs" -# Change your SharePoint domain name (preview) +# Change your SharePoint domain name When you first signed up for Microsoft 365, you created an onmicrosoft.com domain. Even if you later added a custom domain, the original onmicrosoft.com domain is used for all your SharePoint and OneDrive URLs. If your organization has gone through a rebranding, merger, or acquisition and n > [!VIDEO https://www.microsoft.com/videoplayer/embed/RWOnwY] >[!IMPORTANT]-> This feature is in public preview and currently available to organizations that have no more than 10,000 total SharePoint sites and OneDrive accounts combined, which was increased from the earlier limit of 5,000 total sites on August 23rd, 2022. If you get error 773 "Not Implemented" when you try to start a domain rename, the feature isn't enabled yet for your organization because we're still rolling it out. Try again later. +> This feature is currently available to organizations that have no more than 10,000 total SharePoint sites and OneDrive accounts combined. If you get error 773 "Not Implemented" when you try to start a domain rename, the feature isn't enabled yet for your organization. Try again later. > [!NOTE] > - This change affects only SharePoint and OneDrive URLs. It doesn't impact email addresses. > - For info about changing a site address, for example, from `https://contoso.sharepoint.com/sites/sample1` to `https://contoso.sharepoint.com/sites/sample2`, see [Change a site address](change-site-address.md). > - This feature isn't available for organizations that have set up multi-geo. > - This feature is not available for Microsoft 365 Government GCC High and DoD customers.-> - When you rename your SharePoint domain, we create a redirect at the previous address. -> - You can only rename your SharePoint domain once every six months. +> - When you rename your SharePoint domain, we create a redirect at the previous address which will expire 1 year after the rename. +> - You can only rename your SharePoint domain once. > - Changing your SharePoint domain name back to the original name after you rename it isn't supported. For example, if you change your SharePoint domain from `contoso.sharepoint.com` to `fabrikam.sharepoint.com`, changing it back to `contoso.sharepoint.com` isn't supported.-> - Redirects from the previous name are permanent and do not expire. ## Limitations |