Forum Discussion

CarlosMorales's avatar
CarlosMorales
Copper Contributor
Apr 28, 2022

Create Conditional Access Policy

Hi Team. I have a doubt, I have assign MFA for Outlook and Teams clients?   In Conditional Access policy, Conditions - Device platforms - Select Windows. In Client Apps select Mobile apps and desk...
Conditional Access
rahuljindal's avatar
rahuljindal
Bronze Contributor
Apr 29, 2022
Hi. It sounds about right. Is the CA policy not working for you?
  • CarlosMorales's avatar
    CarlosMorales
    Copper Contributor
    Apr 30, 2022
    It only works in Teams client. In Outlook client not working.
    • rahuljindal's avatar
      rahuljindal
      Bronze Contributor
      Apr 30, 2022
      Have you tried running your scenario against the whatif tool? Also, you can look at sign-in logs to verify if you have configured the right CA parameters or not.
    • Adin_Calkic's avatar
      Adin_Calkic
      Steel Contributor
      Apr 30, 2022

      Hi CarlosMorales ,

       

      This is what I would do. Make sure you use Modern authentication.

      This is not ideal situation with Exchange Online App, but adding Device platfrom - Windows, Client apps - Mobile apps and Desktop clients plus enabling Modern authentication is the closest you can get.

      I just tested in my environment and it will require MFA for Outlook client on Windows (if modern enabled), it does not ask you for MFA on other devices. It will not require MFA in browsers. 

      Good luck

       

       

      Please see below, testing environment with the policy from above.

       

      • CarlosMorales's avatar
        CarlosMorales
        Copper Contributor
        May 01, 2022
        Hi Adin. I really appreciate your answer.
        I have configured the policy as you explain, the results:
        Outlook web doest not request MFA.
        Teams Client if you request MFA.
        Outlook client does not request MFA, not working.

        Thanks,

Resources