%3CLINGO-SUB%20id%3D%22lingo-sub-362099%22%20slang%3D%22en-US%22%3EProject%20Online%3A%20Now%20with%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-362099%22%20slang%3D%22en-US%22%3E%0A%20%26lt%3Bmeta%20http-equiv%3D%22Content-Type%22%20content%3D%22text%2Fhtml%3B%20charset%3DUTF-8%22%20%2F%26gt%3B%3CSTRONG%3EFirst%20published%20on%20TECHNET%20on%20Dec%2021%2C%202017%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%20Just%20a%20quick%20posting%20to%20confirm%20that%20Conditional%20Access%20for%20SharePoint%20Online%20and%20OneDrive%20also%20applies%20to%20Project%20Online%20%E2%80%93%20as%20it%20sits%20on%20top%20of%20SharePoint.%26nbsp%3B%20You%20can%E2%80%99t%20just%20block%20Project%20Online%20though%20%E2%80%93%20you%20block%20it%20by%20blocking%20SharePoint.%26nbsp%3B%20Bill%20Baer%20has%20a%20great%20blog%20post%20-%20%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fwbaer%2F2017%2F02%2F17%2Fconditional-access-policies-with-sharepoint-online-and-onedrive-for-business%2F%22%20title%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fwbaer%2F2017%2F02%2F17%2Fconditional-access-policies-with-sharepoint-online-and-onedrive-for-business%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20https%3A%2F%2Fblogs.technet.microsoft.com%2Fwbaer%2F2017%2F02%2F17%2Fconditional-access-policies-with-sharepoint-online-and-onedrive-for-business%2F%20%3C%2FA%3E%20so%20I%E2%80%99ll%20just%20show%20that%20the%20same%20applies%20to%20Project.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20To%20use%20Conditional%20Access%20some%20of%20the%20features%20require%20the%20Azure%20Active%20Directory%20Premium%20(See%20Bill%E2%80%99s%20blog%20and%20the%20Azure%20AD%20article%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Factive-directory-conditional-access-technical-reference%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Factive-directory-conditional-access-technical-reference%20%3C%2FA%3E%20and%20I%E2%80%99ll%20walk%20you%20through%20the%20simple%20scenario%20I%20configured.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20I%20want%20to%20block%20Sara%20Davis%20from%20accessing%20Project%20Online%20so%20I%20go%20to%20the%20Office%20365%20Admin%20Portal%20and%20then%20to%20the%20Azure%20AD%20Admin%20center.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F85755iC57D8B4AFBA05FC3%22%20%2F%3E%20%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F85756iB754FA54F6608AED%22%20%2F%3E%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20From%20there%20I%20take%20the%20Conditional%20access%20option%20(you%20can%20start%20a%20trial%20if%20you%20don%E2%80%99t%20have%20Premium)%20and%20add%20a%20New%20policy.%26nbsp%3B%20You%20can%20see%20the%20various%20options%20here%20%E2%80%93%20and%20I%E2%80%99m%20going%20to%20select%20Sara%20Davis%20as%20my%20user%2C%20for%20the%20Cloud%20apps%20I%20will%20choose%20Office%20365%20SharePoint%20Online%20and%20OneDrive.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F85757iBB704DBB9036CAA5%22%20%2F%3E%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20Under%20conditions%20I%20have%20various%20options%20%E2%80%93%20and%20as%20I%20just%20want%20to%20block%20I%20can%20choose%20the%20Client%20apps%20check%20Yes%20to%20configure%20and%20check%20both%20Browser%20and%20Mobile%20apps%20and%20desktop%20clients%20(I%E2%80%99ll%20leave%20you%20to%20review%20in%20the%20Azure%20AD%20document%20the%20other%20cool%20options%20for%20locations%2C%20device%20platform%20and%20sign-in%20risk%20%E2%80%93%20which%20give%20more%20granular%20control).%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F85758i6ABB3BA4A7B1F3A9%22%20%2F%3E%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20The%20final%20thing%20is%20to%20add%20the%20Access%20controls%20%E2%80%93%20and%20I%20just%20want%20to%20Block%20access.%26nbsp%3B%20I%20select%20that%2C%20Enable%20Policy%20and%20Create%20%E2%80%93%20and%20I%E2%80%99m%20done.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F85759i0C8D0EDC4E6A2162%22%20%2F%3E%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20Now%20when%20Sara%20tries%20to%20get%20to%20browse%20to%20PWA%20she%20will%20see%20this%20message%20%E2%80%93%20and%20I%E2%80%99ve%20expanded%20the%20details%20part%3A%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F85760iA0D9277D8DCA4A76%22%20%2F%3E%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20Same%20if%20she%20tries%20to%20use%20the%20Project%20Online%20Desktop%20Client%20or%20Project%20Professional%202016%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F85761iF70B24F22068E204%22%20%2F%3E%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20I%20hope%20you%20find%20this%20a%20useful%20addition%20to%20Project%20Online%20and%20Azure%20AD!%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-362099%22%20slang%3D%22en-US%22%3EFirst%20published%20on%20TECHNET%20on%20Dec%2021%2C%202017%20Just%20a%20quick%20posting%20to%20confirm%20that%20Conditional%20Access%20for%20SharePoint%20Online%20and%20OneDrive%20also%20applies%20to%20Project%20Online%20%E2%80%93%20as%20it%20sits%20on%20top%20of%20SharePoint.%3C%2FLINGO-TEASER%3E
First published on TECHNET on Dec 21, 2017
Just a quick posting to confirm that Conditional Access for SharePoint Online and OneDrive also applies to Project Online – as it sits on top of SharePoint.  You can’t just block Project Online though – you block it by blocking SharePoint.  Bill Baer has a great blog post - https://blogs.technet.microsoft.com/wbaer/2017/02/17/conditional-access-policies-with-sharepoint... so I’ll just show that the same applies to Project.

To use Conditional Access some of the features require the Azure Active Directory Premium (See Bill’s blog and the Azure AD article https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-tech... and I’ll walk you through the simple scenario I configured.

I want to block Sara Davis from accessing Project Online so I go to the Office 365 Admin Portal and then to the Azure AD Admin center.



From there I take the Conditional access option (you can start a trial if you don’t have Premium) and add a New policy.  You can see the various options here – and I’m going to select Sara Davis as my user, for the Cloud apps I will choose Office 365 SharePoint Online and OneDrive.



Under conditions I have various options – and as I just want to block I can choose the Client apps check Yes to configure and check both Browser and Mobile apps and desktop clients (I’ll leave you to review in the Azure AD document the other cool options for locations, device platform and sign-in risk – which give more granular control).



The final thing is to add the Access controls – and I just want to Block access.  I select that, Enable Policy and Create – and I’m done.



Now when Sara tries to get to browse to PWA she will see this message – and I’ve expanded the details part:



Same if she tries to use the Project Online Desktop Client or Project Professional 2016



I hope you find this a useful addition to Project Online and Azure AD!