Conditional Access
Control access based on the user, device, network, location, and time. HENNGE Identity helps MSPs add conditional access to Microsoft 365, Google Workspace, and SaaS environments without requiring clients to upgrade their Microsoft licenses.
Who gets in, to which apps, from which device and when.
“We already have MFA.”
A stolen login can still get through.
Upgrading gets expensive
Moving every user to Premium adds cost fast.
Every client is different
Different platforms, plans, and security controls.
Requirements keep changing
Insurers and auditors expect stronger access controls.
Decide who gets in, to which apps, from which network and when.
No license upgrade, no complex setup.
Secure login portal
Multi-factor authentication
Password manager
App portal with SSO
User provisioning
Secure browser
VPN-free remote access
Logs
User group policies
User policies
See which of your clients have MFA but no conditional access, and what it takes to give it to all of them.
Do my clients need Business Premium or Entra ID P1?
No. Clients stay on Microsoft 365 Business Basic, Business Standard or Google Workspace. HENNGE Identity connects as the identity provider and adds conditional access on top of the plan they already have.
How is this different from Microsoft’s conditional access?
Microsoft’s version is broader. It includes Intune device compliance, risk signals and session controls, and it needs Premium or P1 for every user. HENNGE Identity covers the core controls most clients need: network, device certificate, time, browser and user rules, set up from three simple screens and with no license upgrade.
What can a rule check?
IP addresses, ranges and IP sets, HENNGE device certificates, time of day, days of the week and date ranges, HENNGE Secure Browser, and username or custom user attributes. Rules combine with AND, OR and NOT, and apply at sign-in, at OTP or when a user opens a specific app.
How long does setup take?
In our demo, a Business Basic tenant went from MFA only to conditional access in about four minutes: sync users from Entra ID, create a group, pick a rule, assign users. For your first client, our team joins a setup call to get them live.
Will this create more tickets for my team?
Usually fewer. Users on a company device with a certificate can sign in without a password, and you can skip OTP on trusted networks. When a login is blocked, the user sees a clear message: “Login denied by the access policy.” Start with one pilot group, then expand.
Does it work for Google Workspace clients?
Yes. HENNGE Identity can act as the identity provider for Google Workspace, so the same access rules apply.
How does pricing work?
You buy per user at partner cost and set your own price to the client, as an add-on or bundled into a managed security tier. No minimum seats, no long-term contracts.
What support do I get as a partner?
Every partner gets the HENNGE Partner Portal (training videos, sales playbook, client one-pagers), a named account manager, and a setup call for the first client.
