25,081 questions
Hi Akshay-MSFT /Domooney-MSFT,
please find the attached pdf file which contains requested screenshot regarding conditional access.
Azure conditional access policy block the user account not working
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 33%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESC%3C/text%3E%3C/svg%3E)
Sai Chakradhar Reddy
0
Reputation points
I created one user account with custom domain in active directory and applied p2 license to enable azure access conditional policy.
While I am restricting use logon by using conditions access but unable to apply.
Please find the sign-in logs.
A sign-in can also be interrupted (e.g. blocked, multifactor authentication challenged) because of a user risk policy or sign-in risk policy. Currently, this tab only lists Conditional Access policies.
Microsoft Security Microsoft Entra Microsoft Entra ID
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(22.400000000000002, 28.999999999999996%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDM%3C/text%3E%3C/svg%3E)
Domooney-MSFT 2,606 Reputation points Microsoft Employee Moderator2023-08-24T08:26:23.2066667+00:00 Hi @Sai Chakradhar Reddy thank you for uploading the screenshots, could you please click on the "test policy1" hyperlink inside the sign-in log event. This should give a matrix for what condition did not match your Conditional Access policy. You can share the screenshot here.
It should look something like this:
-
Akshay-MSFT 17,951 Reputation points Microsoft Employee Moderator2023-08-24T08:33:57.1466667+00:00 Thank you for posting your query on Microsoft Q&A, in order to dig through this could you please share the entire conditional access policy including:
- All Apps you have selected in "Target Resource", all the "Conditions" you have defined and if Policy is set to "Report Only", "On" or "Off"
- From User Signin Log if you could share "Basic info" and "authentication details" of success event.
Thanks,
Akshay Kaushik
Sign in to comment
4 answers
Sort by: Most helpful
-
-
-
Sai Chakradhar Reddy 0 Reputation points
2023-08-26T08:25:10.28+00:00 Header 1 Header 2 Cell 1 Cell 2 Cell 3 Cell 4 -
Domooney-MSFT 2,606 Reputation points Microsoft Employee Moderator
2023-08-29T09:44:04.69+00:00 Hi @Sai Chakradhar Reddy it looks like some of the data might be missing, if you click on the "test policy1" hyperlink inside the specific users sign in logs it should show a page like below, which will show why the policy did not apply
-
Domooney-MSFT 2,606 Reputation points Microsoft Employee Moderator
2023-08-31T08:45:59.5633333+00:00 Hi @Sai Chakradhar Reddy please let me know if you have any followup questions, I would be happy to help.
Kind Regards,
Donal
Sign in to comment -
-
Domooney-MSFT 2,606 Reputation points Microsoft Employee Moderator
2023-09-04T08:27:05.82+00:00 Please review the Conditional Access tab in the users sign-in logs, and click on the policy which is not taking effect as you wish, this will give you a breakdown of what conditions are "Satisfied" and which are not satisfied, you can then revert back to your CA policy to make changes as necessary.
Do let me know if you have any further questions, I would be happy to help!
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.