Built out of frustration.
Shared out of passion.

Every organization that works with Microsoft 365 needs a Conditional Access strategy. The problem? Most guidance assumes you're starting from scratch with a clean tenant, the right licenses, and fully managed devices. Reality is messier.

You might have inherited a tenant with 200 legacy policies, a mix of P1 and P2 licenses, domain-joined machines that haven't been touched in years, and a helpdesk that's already overwhelmed. You need a framework that works now — not one that requires a 18-month modernization project before you can even start.

CA Framework Builder was created to bridge that gap. It meets you where you are, generates a baseline that fits your current reality, and gives you a clear, license-driven path to get better over time.

This tool would not exist without the foundational work of Claus Jespersen, whose persona-based Conditional Access framework has become a cornerstone of Microsoft security architecture. His approach of organizing policies around user personas — rather than individual rules — is elegant, scalable, and battle-tested in production environments around the world.

CA Framework Builder takes that foundation and makes it accessible to organizations at every maturity level, adapting the framework to what's actually possible given your licenses and device management setup.

CA Framework Builder was designed and built in close collaboration with Frontier, an advanced AI developed by Anthropic. This is not a disclaimer — it's something to be proud of.

The combination of deep domain expertise in Microsoft security architecture and AI-assisted development made it possible to build a tool of this complexity in a fraction of the time it would otherwise take. Every policy definition, every upgrade path, every build principle was carefully crafted and reviewed.

That said, AI is not infallible. This tool has been built with care, but it is not a substitute for professional judgment. Always review generated configurations with a qualified security professional before deploying to production.

CA Framework Builder is open source. The code is available on GitHub and contributions are welcome. If you find a bug, have a suggestion, or want to add support for a new license or persona — open an issue or submit a pull request.

This tool is a living project. As Microsoft evolves Conditional Access, Entra ID, and the broader security stack, the framework will evolve with it. The changelog documents every change, every improvement, and every lesson learned.

CA Framework Builder does not collect, store, or process any personal data. The wizard runs entirely in your browser — nothing you enter is sent to a server.

Anonymous visitor statistics are collected using Plausible Analytics — a privacy-first, cookie-free analytics tool that is fully GDPR-compliant. No personal data, no tracking, no cookies. Just basic metrics like page views and visitor counts to help improve the tool.