Forum Discussion

niko_jung's avatar
niko_jung
Copper Contributor
Jan 10, 2023

Conditional Access Block Download policy matched but not redirect to *.mcas.ms

Hi All,

I'm trying to block file downloads from Teams Web Client with conditional access.

It seems that there is a match to the policy in Sign-in logs, it shows Session Controls "Enfoeced" but Teams Web Client did not redirect to *.mcas.ms

 

  • niko_jung Hi!

     

    for the redirection to occur you need 2 things:

    - a conditional access policy that matches the traffic, which you seem to have

    - a session policy in defender for cloud apps.

     

    Can you please confirm you have the latter?

    If you don't simply configure one to block the downloads or activities you would like.

  • niko_jung Hi!

     

    for the redirection to occur you need 2 things:

    - a conditional access policy that matches the traffic, which you seem to have

    - a session policy in defender for cloud apps.

     

    Can you please confirm you have the latter?

    If you don't simply configure one to block the downloads or activities you would like.

Resources