New Intune App listed?

Jeevious 

Same Issue here, but not solved yet.

The customer wanted us to create a conditional access policy that blocks sign ins from unmanaged devices. Therefore i've created:

• All Users included
• All cloud apps included
• "Microsoft Intune" and "Microsoft Intune Enrollment" excluded
• Conditions: Exclude filtered devices: deviceOwnership -eq Company OR deviceOwnership -eq Personal
• Access control: Block

The policy is fine i guess. But: The SignIn Logs of the user shows that the App the user is trying to sign in while Intune Enrollment is "Microsoft Intune Web Company Portal". Unfortunately this cannot be exkluded. (By the way: We're using Automated Device Enrollment via Apple Business Manager / Intune Enrollment Program Token to enroll these devices.)

There must be a better solution than excluding users temporarily from the policy..... 😕 (This cannot be a solution of course).

Here you can see the sign-in logs: 

Right after excluding the user from the conditional access policie it worked immediately (of course). (The "interupt" event was the MFA prompt, just as expected.)

Kind regards

Patrick