Teams access from browser on Linux

Question

Hi,

In our organization (approx. 150 users) we want to configure conditional access policy to require Hybrid Azure AD joined devices to access Teams, but allow small number of contractors to login to Teams from Chromium on Linux. The problem is that by default any user can access every O365 app from every device and platorm except Teams where misteriously domain joined device is required and therefore browser access gets blocked and we realy want to know why.

We tried removing all conditional access policies and setting up grant policy for unsupported platforms but nothing works.

Answer 1

Hi JakubWolski1,

Sorry for the delay.

Considering the current situation, I suggest you escalate this issue to our backend engineers for more diagnostic tools help. Please refer to the Private Message to check the further action.

We truly appreciate your kind understanding.

Best Regards,

Linda

Answer 2

Hi Linda,

Thanks for the suggestion to disable all conditional access policies. I've done that but our issiue is still there:

Answer 3

Hi JakubWolski1,

Thanks for your clarification and information.

To confirm if the issue is related to the conditional access policy you set up, and if it is convenient, I suggest you temporarily turn off the conditional access policies in your tenant, and then wait for some time to see if it makes any difference.

Thanks,

Linda

Answer 4

Hi Linda,

Our issiue isn't Linux related at all, we cannot sign in to Teams from browser on any platform except for Edge on Hybrid Azure AD joined devices.

I know that SSO won't work on other platforms but in our scenario we want to allow teams on non domain joined devices after in-browser sign in.

After succesfull in browser sign in on teams.microsoft.com (Chrome on Windows 10 or any other supported brower on any platrorm on non domain joined device) user is greeted with the message below and only option is to sign out.

In AAD Admin Center I get this failure reason:

But no conditional access policy applied to the test user requires a compliant device:

Answer 5

Hi JakubWolski1,

Greetings.

As you are talking about Teams on Linux and are experiencing an issue on it, I kindly suggest you post a new thread on our specific support channel for expert help: office-teams-linux-itpro - Microsoft Q&A

Sorry for that our team have limited lab resources on checking the issues and questions on Linux environment.

PS: I found a related KB about hybrid AAD join implementation, it indicates that SSO is not work for organizations may be using on cross OS/browser platforms, for example iOS/Linux with Firefox, Safari, Chrome without the Windows 10 extension. Reference for you: Plan hybrid Azure Active Directory join - Azure Active Directory | Microsoft Docs

We truly appreciate your kind understanding.

Best regards,

Linda