This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 10%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
Hi,
I have created App protection policy for Microsoft Loop app from Intune but still its getting blocked through CA policy stating "you are trying to open this resources with an app which is not approved by IT"
How can we resolve it?
Thank you!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 90%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Hello @Mebin M ,
Have you tried to troubleshoot the App protection policy to ensure that it is running as expected?
Follow these steps:
https://learn.microsoft.com/en-us/troubleshoot/mem/intune/app-protection-policies/troubleshoot-app-protection-policy-deployment
@Pauline Mbabu Thank you for the link. I looked that but nothing with respect to CA policy found.
Below are the steps performed by me.
1)Made the Loop application available in Android company portal for user to install it.
2)Created App protection policy for Loop.
So,when user trying to login its gets blocked with error code 530021 in CA policy.Its stating application should be the approved app.screenshot attached.Screenshot 2025-04-28 213237.png
Do we need to add the loop application under target resources in CA policy?screenshot attached target resources.png
Hello @Mebin M ,
Since you have created the "app protection policy" and added Loop app and you are still being blocked by the CA policy, I would suggest opening a support request to have this instigated.
https://support.microsoft.com/en-us
Yes, you need a support plan to raise a support ticket
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 60%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESN%3C/text%3E%3C/svg%3E)
@Mebin M Does it work for you ?
Hi Siddhesh,
Thanks for the follow up.
Unable to try the following steps..As it was for one user and temporary testing purpose they asked to exclude user from CA policy itself.Once that was done user was able to login.
Thank you!
yup excluding the user from CA policy will gone allow user to access
Hello,
Please try the below settings in your Intune tenant and see if its working
Change the grant permission to "Require app protection policy" in "Intune" conditional access policy.
Also add Microsoft loop app in the list of policy protected client apps So that the applications you manage through App protection policies can be accessible in all corp devices.
Regards,
Siddhesh
@Siddhesh Narkar Thank you for your input. We have created "app protection policy" and added Loop app in that.
Does adding loop app under CA policies target resources won't work??
There is no app protection policy for outlook and teams but its getting pass through all check in CA policy.
Thank you so much!
Hi Mebin,
As far as i know the Outlook and teams are already part of the protected client apps & approved client apps list however, Microsoft loop needs to be added in the list in order to access,
I think adding to the list & check in require app protection policy will help to access the MS Loop app
Thank you
@Siddhesh Narkar Thank you so much.
Adding to the list you mean by adding in app protection policy right?
Correct
@Mebin M Does it work for you ?