You have a Microsoft 365 E5 subscription. You need to ensure that users are prompted to accept a custom terms of use (Toll) agreement when they sign…

Microsoft Entra Terms of Use (ToU) are enforced through Conditional Access policies. To meet the requirement, an administrator first uploads the custom ToU document within Microsoft Entra Identity Governance. Then, a Conditional Access policy is configured to apply to the desired users and cloud applications. Within this policy, the "Terms of Use" option is selected as a grant control. When a targeted user signs in, the policy triggers, and the user is blocked from accessing resources until they review and accept the specified ToU agreement. This is the designated method for this purpose.

A. an access package: Access packages, part of Entitlement Management, are used to bundle resources (groups, apps, sites) that users can request, not to enforce a global ToU at sign-in.

C. a lifecycle workflow: Lifecycle workflows automate identity-based tasks for users joining, moving within, or leaving an organization, but they do not present agreements during the sign-in process.

D. an authentication method: Authentication methods (e.g., password, authenticator app, FIDO2 key) are credentials used to verify a user's identity, not to enforce policy agreements like a ToU.

1. Microsoft Entra documentation

"Terms of use": "Microsoft Entra terms of use (ToU) provides a simple method that organizations can use to present information to end users... To require a terms of use policy to be accepted

you'll need a Conditional Access policy." (Microsoft Learn

Microsoft Entra > Identity Governance > Terms of use

"Prerequisites" section).

2. Microsoft Entra documentation

"Conditional Access: Grant": This document lists the available access controls for Conditional Access policies. It explicitly states

"Require terms of use - This control requires the user to consent to the terms of use that has been configured in the tenant." (Microsoft Learn

Microsoft Entra > Conditional Access > Policies > Grant

"Require terms of use" section).

3. Microsoft Entra documentation

"What are access packages and what resources can I manage with them?": "Entitlement management introduces the concept of an access package. An access package is a bundle of all the resources with the access a user needs to work on a project or perform their task." (Microsoft Learn

Microsoft Entra > Identity Governance > Entitlement management

"What are access packages" section).