This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I'm attempting to exclude an enterprise app from two conditional access policies, but it's not working. I tried testing some users using "What if" and got a message saying that no policy was added, but when they attempt to log in to the app, they are still prompted for MFA. What could be the issue here?
A cloud-based identity and access management service for securing user authentication and resource access
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
@Theodoros Yiorkas Just checking in to see if any of the below information was helpful. If you have any further updates on this issue, please feel free to post back.
Check the Entra sign in logs and see what policy is being applied.
If no policy, then verify per-user MFA is not enabled or you are requiring MFA registration
https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-mfa-policy
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 24%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Hello Theodoros Yiorkas.
Thanks for your question.
When did you apply this policy? Sometimes CA policies can take up to a day to get applied in some instances.
I would recommend you wait a bit to see the implications.
Also, you can test with just a single policy applied to see behaviour
Please let me know if you have further questions
You can mark it 'Accept Answer' if this helped.