Dynamic access control based on signals like user location, device health, risk level, and application sensitivity. Enforces context-aware security policies.