CODEWITHSUNDEEP
azure-active-directoryazure-ad-graph-apiazure-security
Esa
Esa

Reputation: 3

App Registration not showing as Cloud App on AAD Conditional Access

I'm creating an app registration for Azure AD using my admin account (specifically for Mobile and desktop applications authentication). I intend to create an AAD Conditional Access that will be applied to the created app registration. For some reason the App Registration is not visible on the cloud app selection when I am trying to select it.

Screenshot - Conditional Access > Policy > Cloud apps or actions > Select apps

P.S. It showed on the cloud apps when I tried adding a "Web" platform on the app registration, but still CA is not applied when trying to login using the App Registration. Am I missing anything? Thanks in advance.

Screenshot - AAD - Sign-Ins

Upvotes: 0

Views: 6370

Answers (1)

Allen Wu
Allen Wu

Reputation: 16458

Please note that the CA policy is applied when a client calls a service. It's not applied directly to a client (public/native) application.

See the Note tip here.

Since Conditional Access policy sets the requirements for accessing a service you are not able to apply it to a client (public/native) application. Other words the policy is not set directly on a client (public/native) application, but is applied when a client calls a service. For example, a policy set on SharePoint service applies to the clients calling SharePoint. A policy set on Exchange applies to the attempt to access the email using Outlook client. That is why client (public/native) applications are not available for selection in the Cloud Apps picker and Conditional Access option is not available in the application settings for the client (public/native) application registered in your tenant.

It also explains why CA is not applied when you tried to login using the App Registration -- you didn't call a service.

Upvotes: 1

Related Questions