Forum Discussion
Signins: Login status = success but Conditional access = failed?
When looking at the Sign-in logs, I see entries with Status = success while the Conditional Access = failure. Shouldn't the status say Failure as well when the conditional access is blocking t...
bart_vermeersch I realize this is an old post but Conditional Access policies are enforced after first-factor authentication is completed, which might explain things 🙂
I ended up talking through this with support. The only situation where I was seeing this was connections using ActiveSync. Support told me basically the due to Exchange not being not being aware of the CA results, that's why there is this disconnect/mismatch. I'm told the end result is the connection actually gets blocked, but have not manually tested to verify it. There's a request into the appropriate teams to make the logging more coherent.
- I have a similar case, perhaps even more confusing.
Status: Success
Failure reason: Other.
Conditional Access: Not Applied
Client App: Browser
MFA result: empty
MFA auth method: empty
MFA Auth detail: empty
Sign-in Error: empty
So, how to interpret this correctly, was this a successful login? Was this a blocked login?
Inconclusive?
