User Profile
Julien_Hacquard
Copper Contributor
Joined Feb 28, 2023
User Widgets
Recent Discussions
MCAS session policy with Conditional Access is blocking accessin external shares
Hi, I have a strange behavior between a test tenant and qualification tenant. Technical context On the source tenant MCAS is activated with session policy for all the MS services. On the target tenant MCAS is not enabled. User A from the source tenant is under conditional access policy to force MCAS session policy control. User B from the source tenant is not. Now the strange behavior When user B tries to access a shared resource from the target tenant, he's able to access it. When user A tries to access a shared resource from the target tenant, he's presenting a page with "Request Access" explaining "You need permission to access this site". When we look at the traces (F12 > Network) for both connection context User B nothing in particular User A all the URLs are in form "*.mcas.ms" When we deactivate the CA for the user A No more issue with the access to the shared resource All the URLs are normal without "*.mcas.ms" to confirm activate CA and MCAS session policy for user B create the same issue with the permission access page so it really comes from here. How and why MCAS session policy control from source tenant can block access to shared resource from target tenant ? Is it incompatible usage ?
