Forum Discussion

Iron Contributor

Sep 15, 2021

Signins: Login status = success but Conditional access = failed?

When looking at the Sign-in logs, I see entries with Status = success while the Conditional Access = failure. Shouldn't the status say Failure as well when the conditional access is blocking t...

Azure Active Directory (AAD)

kuglidani

Copper Contributor

Jan 18, 2022

I encountered the same issue while setting up a CA to disable legacy auth for Exo.

After adding the user to the CA, login status was success but conditional access result was failure

(policy setting was to block access when using legacy auth protocols).

To countercheck the results I went to Exo PowerShell to check the status of the mobile device the user was using and generating this error:

Connect-ExchangeOnline

Get-MobileDevice -Mailbox "<upn>" | fl deviceuseragent,deviceaccessstate,DeviceAccessStateReason,clienttype,whenchanged

DeviceUserAgent : Android-SAMSUNG-SM-N960F/101.10
DeviceAccessState : Quarantined
DeviceAccessStateReason : AadBlockDueToAccessPolicy
ClientType : EAS
WhenChanged : 2022. 01. 14. 10:02:18

As you can see in the results, the access was blocked due to the CA