Forum Discussion
WVD Spring Update Conditional Access Policy
I've enabled the Spring Update in my test tenant, and cannot find the newer 'Windows Virtual Desktop Client' in the list of cloud applications in the conditional access portal. Is there an extra step required to get the client app with ID a85cf173-4192-42f8-81fa-777a763e6e2c to be selectable in the Azure AD Conditional Access Policies?
I tried setting the WindowsAzureActiveDirectoryIntegratedApp tag on the app, but that didn't seem to change anything in the CA portal. Any advice would be greatly appreciated.
We were going back through the setup documentation and found that the instructions for MFA actually reference the other app, and not the client app. The issue we're having I think is that we have an MFA policy for all apps / trusted locations and we can't exclude this one as we would want to. The error on sign-ins includes the ID of the client app.
In testing, we found that applying the policy to the 'Windows Virtual Desktop' application, as is spelled out in the documentation, solves the problem. I was just thrown off by the CA error indicating the client app ID was the issue.
