Conditional Access - Filters for devices (Preview) - Filter not working

Question

This is a great feature and i only wish i can get this to work.
I am following this article: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices

I have a registered device which is not in Intune. I'm guessing that makes it in the category of "Registered not managed by Intune" vs "registered". (What is the difference between the two anyway, wouldn't these two be the same? why differentiate?

I have a conditional access policy based on a value in ExtensionAttribute1. Regardless of what value i put it keeps matching it. Why is that?

Answer 1

@Shashank Kapoor Thanks for reaching out.

1 ) Registered not managed with Intune has a indication of Device presence in Azure AD as registered and management by other MDMs like these but not Intune :

BlackBerry UEM
Citrix Workspace device compliance
IBM MaaS360
JAMF Pro
MobileIron Device Compliance Cloud
MobileIron Device Compliance On-prem
VMware Workspace ONE UEM (formerly AirWatch)

2) Registered is just the normal device registration with Azure AD.

Would you be share the screenshot of the policy you created, so that we can help you further ? Also what is your end goal with the CA policy.