Conditional Access: block all cloud apps except My Account site

Question

Conditional Access: block all cloud apps except My Account site

Samir Kothari 41

Through conditional policies we've blocked browser access to all cloud apps. We are now rolling out MFA to everyone. Is there any way to exclude blocking access to https://myaccount.microsoft.com/ ?

Yotam 25 Reputation points

2025-11-17T11:23:36.0933333+00:00

Have you figured it out?

1 answer

Your answer

Yotam 25 Reputation points

2025-11-17T11:23:36.0933333+00:00

Have you figured it out?

Answer 1

Vasil Michev 124.4K MVP Volunteer Moderator

There's a separate condition you can use to target the MFA registration process, as detailed here: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-cloud-apps#user-actions

Samir Kothari 41 Reputation points

2023-05-02T18:55:24.1966667+00:00

thanks for your response, I did read that article earlier on. Sorry, but I didn't see anything in that article that would help here.

We still want to block access to all microsoft apps/services through the browser, but I'd like to give the users the option of being able to modify their mfa settings through the myaccount link. Not sure if that's possible.
Fagagnini Marco, I334 0 Reputation points

2023-06-29T07:14:41.5433333+00:00

I have the same challenge. I need to block everything from unknown clients except the Security Information Page for the MFA setup.

Share via

Conditional Access: block all cloud apps except My Account site

1 answer

Your answer