How to setup Azure SSO with Salesforce conditional access/lock down users from personal computer and mobile device

Question

Can Azure SSO with Salesforce lockdown Salesforce users from accessing personal devices/computer?

can someone point to where is the instruction to setup conditional access policies that can deny user Salesforce login access when user using personal computer?

thx

Answer 1

To achieve your objective of denying Salesforce login access when users are on a personal computer or device, follow these general steps:

---

Log in to the Azure portal & navigate to Azure Active Directory > Enterprise applications.

---

Select the Salesforce app (you should have set up the Salesforce integration with Azure AD beforehand).

---

In the left-hand pane of the Azure AD section, select Security.Under Security, click on Conditional Access. Click on + New policy.

---

Provide a name for your policy, something descriptive like "Block Salesforce on Personal Devices".

---

Under Assignments, select **Users and groups.**Choose the users/groups for which this policy will apply.

---

Under Assignments, select **Cloud apps.**Choose "Select apps" and then pick "Salesforce".

---

Select Conditions and then Device platforms.Choose the desired platforms to target. For instance, if you want to block mobile devices, choose iOS and Android.Under Conditions, select Client apps if you want to target specific types of access, like browser or mobile apps.There are also other conditions like Locations if you wish to enforce policies based on user locations.

---

Finally, Under Access controls, select Grant.Choose Block access.Enable Policy and Save:Set the policy to On and click on Create.