Conditional Access: block all cloud apps except My Account site

Samir Kothari 31

Through conditional policies we've blocked browser access to all cloud apps. We are now rolling out MFA to everyone. Is there any way to exclude blocking access to https://myaccount.microsoft.com/ ?

1 answer

Vasil Michev 105.7K Reputation points MVP

2023-05-02T18:34:14.39+00:00

There's a separate condition you can use to target the MFA registration process, as detailed here: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-cloud-apps#user-actions
Please sign in to rate this answer.

1 person found this answer helpful.
Samir Kothari 31 Reputation points

2023-05-02T18:55:24.1966667+00:00

thanks for your response, I did read that article earlier on. Sorry, but I didn't see anything in that article that would help here.

We still want to block access to all microsoft apps/services through the browser, but I'd like to give the users the option of being able to modify their mfa settings through the myaccount link. Not sure if that's possible.

Fagagnini Marco, I334 0 Reputation points

2023-06-29T07:14:41.5433333+00:00

I have the same challenge. I need to block everything from unknown clients except the Security Information Page for the MFA setup.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Conditional Access: block all cloud apps except My Account site

1 answer

Your answer