Nov 29 2019
- last edited on
Jul 24 2020
I want to create a new CA policy that grants access from corporate devices (windows,MAC, and iphones all are Azure hybrid joined or Azure registered ) and if they are not using a corporate device it prompts for their MFA (text or authenticator app)
It looks like my options in the Grant blade are for MFA or hybrid AD joined only. I don't think that includes Azure registered devices? correct?
is it possible to included Azure registered devices in a policy to grant access?
Dec 01 2019 01:05 AM
Dec 01 2019 05:26 AM
You have an option i CA to grant/block access depending on if a device meets compliance
You could perhaps use this to set up a compliance policy that will apply on your other devices.
Once the devices are compliant the will then be able to access your resources, and be prompted for MFA
Or you could set up an app protection policy in MAM