Restrict Microsoft cloud apps to only access from Azure Ad registered devices

Learn Cloud 0 Reputation points
2023-02-03T06:49:21.68+00:00

I'm trying to set one conditional policy that only Azure AD devices have a access to browse Microsoft cloud apps. For that I followed below steps un Azure AD under conditional access policy.
Create new policy

  • Users : specified users
  • Cloud apps : All
  • Conditions : Device platform : Any
    Filter Devices : include filtered devices in policy
    Trust type : Equals to > Azure AD registered
  • Grant : Allow with multi factor authentication.

But here the problem I'm able to access cloud apps from all devices if device is not registered with Azure AD also.
And I'm getting policy result under sign in logs that conditional policy result not applicable.
Could you please help me out setting condition that access cloud apps only from Azure Ad registered devices

Note : We don't have any on-premises environment

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
5,486 questions
Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,569 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
793 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,451 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Manu Philip 16,971 Reputation points MVP
    2023-02-03T07:53:31.01+00:00

    I think, you haven't set the app's properties to allow the access only from the interested users as explained in the below reference

    https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-restrict-your-app-to-a-set-of-users#update-the-app-to-require-user-assignment

    --please don't forget to upvote and Accept as answer if the reply is helpful--