Conditional access ;block all cloud apps excluding devops and azure management sigin log interpretation.

Question

We have conditional access policy in our organisation the block external user from accessing all apps except azure devops and azure management.

The conditional access works fine only that the resulting sign in logs are a bit confusing to the security analysts.

If I could kind get an explanation of why the blow happens.

In the below screenshot the user tries to access the azure portal (as shown in the application title) but is blocked by the conditional access.

I

In this imaged the user is still trying to access the azure portal but the conditional access does not apply

My question is what is the difference between the two azure portals or azure portal

Answer 1

I can't tell what the issue is from those images, but I would point out that you can't separate Dev Ops from the Azure portal with a CA policy:

https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-cloud-apps#microsoft-azure-management