B2C Conditional Access for Sign-In Flow Not Working

Question

I have a very simple conditional access policy defined that is set to grant for users within a specific group:

In my recommended SignIn flow I have MFA Enforcement set to Conditional and Enforce Conditional Access Policies selected:

I have several difference users set in this group however, in all cases when the policy is evaluated it always shows PolicyDoesNotApplyReporting :

Even if I turn the policy on then MFA is never enforced for these user that go through this SignIn Flow.

I've been through the documentation numerous times and I am not sure what I am missing here. Thanks!

Answer 1

Hi @Nick Branstein , have you tried to see if it works if you select Cloud Apps? You currently have "No Cloud Apps" selected. The CA policy is granting access for all the users in the group (after MFA), but the CA Policy isn't going to enforce MFA on sign-in to the Azure Portal, since you'd need to add the Microsoft Azure Management cloud app. Having no cloud apps selected also explains why if you turn on the CA policy, MFA is never enforced for any of the users in the group.

Please let me know if this helps!

Best,
James