Hi @Dean Gross,
If you are referring to how our Conditional Access App Control feature handles desktop and mobile clients, please review the document below and take note of our access policies which provides comprehensive security to your apps.
https://docs.microsoft.com/en-us/cloud-app-security/proxy-intro-aad#access-controls
Session controls support web-based apps that leverage single sign-on using SAML2.0 with your IDP. If you are using Azure AD, Open ID Connect authentication is supported as well.
If you are referring to how API connected apps like Dropbox are protected with MCAS, please refer to this document https://docs.microsoft.com/en-us/cloud-app-security/protect-dropbox.
Thanks!
