This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 52%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
Is it possible to add Enterprise Applications created from Catalog to add to Defender and create Custom Access and Session policy in Microsoft Defender? Application is created from existing catalog in Enterprise Application and it is used for SAML authentication.
If answer is yes, how I can add it to list of applications in Microsoft Defender?
Newly created application is not visible in Conditional Access App Control apps.
I don't have this banner either?
Thank you.
@jce
I wanted to check in and see if you had any other questions or if you were able to resolve this issue?
If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
@jce Thank you for reaching out to us, wanted to check if you have got a chance to review the below docs:
https://learn.microsoft.com/en-us/defender-cloud-apps/proxy-deployment-aad
https://learn.microsoft.com/en-us/defender-cloud-apps/session-policy-aad
Reference video: https://www.youtube.com/watch?v=RhxXPb1sBOc
Also, make sure pre-requisites are in place as mentioned in the docs.
Yes, all pre-requisites are in place.
Now I can see application in the list, problem was because defined condition (Microsoft Entra ID, browse to Security > Conditional Access) was not hit.
Now, when I have application in the list I would like to create custom message with Session Policy.
It is application for SAML authentication and I would like to have message defined by administrator.
I found that the only way I can reach this is over Defender and Policy. But when I defined Session Policy no message appear on the client side.
Here is the policy:
I am expecting when defined user with non compliant device try login on VPN via SAML, receive this block message.
Is it possible to do it?
BR
@jce Apologies for the delayed response, just wanted to check does the issue still persists.