Feb 19 2018
- last edited on
Jan 14 2022
The solution works as expected apart from a licensing quirk. Conditional Access is licensed through a Azure AD Premium P1 license.
When I remove the Azure AD Premium P1 license from a user I expect that Conditional Access stops working for that specific user and the he/she is unable to sign in and presented with some kind of error message.
This is not the case, Conditional Access keeps working for that user. I've tested this during several days after license removal.
What is causing this behavior?
Feb 20 2018 01:12 AM
Microsoft does not enforce license requirements for many of the products, thus in many cases removing a license is not a way to control access. Apart from CA, SharePoint Online is the prime example of this.