How can I exclude salesforce chrome extension from conditional access app control policies

Question

I'm testing Salesforce app monitor using MCASB session control policies. To redirect Salesforce app access to MCASB, I created conditional access policies with conditional access app control. Salesforce team is using chrome extension that stop working/appear once the policy is active. I'm suspecting the extension need to reach to specific sites and once the access is forward to MCASB, the FQDN name is changed and in the end mcas.ms is included. How can I exclude the extension from Conditional access policy app control?

Answer 1

@Oscar Rodrigues

Thank you for posting your query on Microsoft Q&A, from above description I could understand that you have applied session control app monitor policy for salesforce, but this is not working when Salesforce team is using chrome extension.

Please do correct me if this is not the case by responding in the comments section.

As per Pre-onboarded apps Salesforce for already onboarded with both access and session controls for Microsoft Entra ID. However only following browser versions are supported.:

We don't have a way to exlude any browser extension from the policy however, session controls are built to work with any browser on any major platform on any operating system, we support the following browsers:

• Microsoft Edge (latest)
• Google Chrome (latest)
• Mozilla Firefox (latest)
• Apple Safari (latest)

Kindly consider updating the browser to latest version and confirm the behavior, if this does not work then consider testing with Microsoft Edge and confirm the behavior.

Please "Accept the answer (Yes)" and "share your feedback ". This will help us and others in the community as well.

Thanks,

Akshay Kaushik