Conditional Access policy not applying

Question

We have provided access to specific external users for an application. We have a conditional access policy that applies to all users that requires multi-factor authorisation. From the sign in logs this policy is only being applied intermittently and when not applied the user access is denied. When the conditional access is not applied the authentication goes to single-factor. Can anyone provide a reason why the conditional access policy isn't being applied.

Answer 1

@Thomas Barnish it looks like the conditional access policy does not apply to this user. Can you check under Conditions whether there are any other exceptions?

To check whether all device platforms, locations and client apps used by the user also apply to this login attempt. You can also use "What If" (in the conditional access policy view) to change the conditions and check when the policy applies and when it does not.