How to block Teams on mobile devices using Conditional Access Policy when MS Authenticator is in use

djavabean 1 Reputation point

I created a CAP to block Microsoft Teams on iOS and Android devices, and it works as expected...unless the mobile device has Microsoft Authenticator in use, because Teams defers to Authenticator for automatic login.

Looking at the user sign-in log I can see that it shows Microsoft Authenticator as the application instead of MS Teams. I use Authenticator for other purposes, like Azure login, so I don't want to ditch that.

Any ideas?

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
6,090 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,534 questions
{count} votes