Conditional Access Link under Security section of Enterprise Application

Question

Hi,

This is regarding the Displaying of Conditional Access Link under Security section of Enterprise Application.

When create the application manually we are able to see the conditional access link under Security section.
But the same type of application when created using Automation. This link is not getting displayed.

Will there is any differences in Applications created manually and automation process.

Thanks
Subbu

Answer 1

Hello @Subramanyam k · Not sure how are you creating the application using Automation but if you use below method, you will get Conditional Access option available under the Security section.

• Get list of applications' template IDs using below call. You can use any application as template to create new application. GET https://graph.microsoft.com/beta/applicationTemplates
• Create a new application using the template ID captured in above call: Call: POST https://graph.microsoft.com/beta/applicationTemplates/8b1025e4-1dd2-430b-a150-2ef79cd700f5/instantiate
  Body:
  {
  "displayName": "AWS Contoso"
  }

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hello @Subramanyam k · The object that you see after navigating to Enterprise Application page by clicking the link in "Managed application in local directory" is the service principal corresponding to the application. When it is created via PowerShell, a tag named "WindowsAzureActiveDirectoryIntegratedApp" is not added to it, which is required for Conditional Access option. When it is created via Portal, this tag gets added automatically.

You need to navigate to Enterprise Application page, copy the App ID, Object ID and Display Name of the service principal and run below command to add "WindowsAzureActiveDirectoryIntegratedApp" tag.

Set-AzureADServicePrincipal -AccountEnabled $true -AppId your_app_id -ObjectId your_object_id -AppRoleAssignmentRequired $true -DisplayName your_display_name -Tags {WindowsAzureActiveDirectoryIntegratedApp}

Once you add this tag you will be able to see the Conditional Access option.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.