No Admin Access for Office 365 Exchange Online via Cloud App Security

%3CLINGO-SUB%20id%3D%22lingo-sub-1092391%22%20slang%3D%22en-US%22%3ENo%20Admin%20Access%20for%20Office%20365%20Exchange%20Online%20via%20Cloud%20App%20Security%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1092391%22%20slang%3D%22en-US%22%3E%3CP%3ENo%20Admin%20Access%20for%20Office%20365%20Exchange%20Online%20via%20Cloud%20App%20Security%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ewe%20are%20experiencing%20a%20bug%20in%20the%20conditional%20access%20setup%20for%20Office%20365%20Exchange%20Online%20App%20being%20'monitor%20only'%20by%20Cloud%20App%20Security.%26nbsp%3B%3C%2FP%3E%3CP%3Eit%20won't%20allow%20you%20to%20log%20in%20and%20hit%20the%20%2Fecp%20(admin)%20site.%20it%20always%20takes%20you%20to%20%2Fowa%20(admin%20mailbox).%26nbsp%3B%3C%2FP%3E%3CP%3Ethis%20was%20working%20for%20months%2C%20has%20started%20to%20fail%20recently.%26nbsp%3B%3C%2FP%3E%3CP%3Eif%20i%20remove%20the%20app%20from%20the%20conditional%20access%20policy%20it%20works%20fine.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eticket%20%23%26nbsp%3B18027527%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1092391%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1092453%22%20slang%3D%22en-US%22%3ERe%3A%20No%20Admin%20Access%20for%20Office%20365%20Exchange%20Online%20via%20Cloud%20App%20Security%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1092453%22%20slang%3D%22en-US%22%3EIs%20the%20condition%20defined%20with%20settings%20such%20as%20turn%20off%20access%20to%20the%20exchange%20admin%20center%3F%20%3CBR%20%2F%3Eyou%20can%20investigate%20the%20Azure%20AD%20sign-in%20logs%20to%20check%20if%20you've%20some%20issues%20within%20the%20condition.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1092958%22%20slang%3D%22en-US%22%3ERe%3A%20No%20Admin%20Access%20for%20Office%20365%20Exchange%20Online%20via%20Cloud%20App%20Security%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1092958%22%20slang%3D%22en-US%22%3E%3CP%3ESame%20issue%20with%20us.%20No%20EAC%20with%20MCAS%20turned%20on%20for%20Exchange%20Online.%20The%20url%20redirects%20to%20Outlook%20Web%20Access%20instead%20of%20opening%20EAC.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

No Admin Access for Office 365 Exchange Online via Cloud App Security

 

we are experiencing a bug in the conditional access setup for Office 365 Exchange Online App being 'monitor only' by Cloud App Security. 

it won't allow you to log in and hit the /ecp (admin) site. it always takes you to /owa (admin mailbox). 

this was working for months, has started to fail recently. 

if i remove the app from the conditional access policy it works fine. 

 

ticket # 18027527

 

2 Replies
Highlighted
Is the condition defined with settings such as turn off access to the exchange admin center?
you can investigate the Azure AD sign-in logs to check if you've some issues within the condition.

Same issue with us. No EAC with MCAS turned on for Exchange Online. The url redirects to Outlook Web Access instead of opening EAC.