This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
HI..
Can we know which rule is applied when conditional access is success?
"Success" here means that the sign-in status was still successful (user was allowed) even after processing all CA policies. For each of the "Not applied" policies you can hit the "..." button to see which conditions matched, etc.
if you see my picture above, there are some record with success in Conditional Access column. So i just want to know which rule is applied, because when i click detail all available CA is not Applied.
Again, "success" has a different meaning here, as detailed in the official documentation: https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins
Conditional access: The status of the Conditional Access (CA) policy. Options are:
- Not applied: No policy applied to the user and application during sign-in.
- Success: One or more CA policies applied to the user and application (but not necessarily the other conditions) during sign-in.
- Failure: The sign-in satisfied the user and application condition of at least one CA policy and grant controls are either not satisfied or set to block access.
In other words, "success" means that at least one policy matched the user/application combo, and was evaluated. If no other conditions matched, or an exception was matched, the policy remains as "not applied". If all the conditions were matched and a "block" or "force MFA" action was triggered, preventing the user from completing the sign-in process, you will see a Failure status.
@Handian Sudianto
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
----------
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
My question is when i see record on sign-in log with conditional access success, i just want to know whicl rule is being applied to this log.
You can see here there are 2 records with conditional access 'success'
Now i want to know which rule is applied to this record.
