Conditional Access Block Download policy matched but not redirect to *.mcas.ms

[niko_jung]

Hi All,

I'm trying to block file downloads from Teams Web Client with conditional access.

It seems that there is a match to the policy in Sign-in logs, it shows Session Controls "Enfoeced" but Teams Web Client did not redirect to *.mcas.ms

[#2 · Accepted solution]

@niko_jung Hi!

for the redirection to occur you need 2 things:

- a conditional access policy that matches the traffic, which you seem to have

- a session policy in defender for cloud apps.

Can you please confirm you have the latter?

If you don't simply configure one to block the downloads or activities you would like.

[#3]

@Yoann_David_Mallet Thanks for your reply, it seems my subscription does not include defender for cloud apps.