Forum Discussion
Conditional Access falsely detects logins from Android as Linux (and blocks them)
Hi everyone,
we're facing an issue which we can't solve correctly:
Scenario:
- Users are accessing M365 Content from Windows, iOS and Android Devices.
- Conditional Access is configured to block Logins from "unknown platforms", so only Win, iOS and Android are allowed.
Issue:
- Some users experience weird issues: They're using an app with m365 SSO. The App opens up the Edge Browser for handling the login-flow. Afterwards the login fails.
- As i can see in the Entra SIgn-in Logs the user-agent is linux. (Therefore it gets blocked correctly)
- A few minutes before the same user, with the same mobile phone, with the same app access isn't blocked, because the login was recognized correctly as android.
Currently i don't have any ideas and i was hoping some of you have great ideas. 🙂
(Adjusting the Conditional Access Policy to allow linux isn't an option, of course.)
Regards,
Patrick
2 Replies
We are getting this issue as well. Mobile app (Which is allowed in our CA policies) redirects SSO to the browser, and then 1 specific user currently gets the device type failure due to it showing as Linux.
I have just tested myself by setting the browser to Desktop Mode and I now can replicate the issue so I will check this with the end user
Hello,
https://www.reddit.com/r/Intune/comments/u1a1ah/conditional_access_sees_some_compliant_android/
That worked for us. Apparently, when users access a microsoft app using a browser on their smartphones and its configured as "desktop version", the smartphone sends wrong information regarding their operating system (guessing its a bug). Not for everyone and not always but you can try it.
