A company needs to block access to their instance of Microsoft 365 from unmanaged devices. They have configured Reverse Proxy and have also created a policy that blocks login activity for the AD group "marketing-users" for the Reverse Proxy access method. During UAT testing, they notice that access from unmanaged devices to Microsoft 365 is not blocked for marketing users.
What is causing this issue?
The issue is likely caused by a missing group name in the SAML response (A). When access to Microsoft 365 from unmanaged devices is not blocked as expected, despite having a policy in place, it often indicates that the SAML assertion is not correctly identifying the user as a member of the restricted group. In this case, the ''marketing-users'' group name should be present in the SAML response to enforce the policy that blocks login activity for this group. If the group name is missing, the policy will not apply, and users will not be blocked as intended.
Chauncey
2 months agoMyra
13 days agoNoel
23 days agoMagda
1 months agoTruman
2 months agoErin
2 months agoChana
2 months agoAvery
2 months agoBettina
11 days agoRozella
13 days agoWillodean
24 days agoTyra
1 months agoMaryann
1 months agoMarleen
2 months agoTarra
2 months agoCarmela
2 months agoDianne
2 months ago