You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/conditional-access/concept-conditional-access-conditions.md
+5-2Lines changed: 5 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -41,6 +41,9 @@ Azure AD Conditional Access supports the following device platforms:
41
41
- Windows
42
42
- macOS
43
43
44
+
> [!WARNING]
45
+
> Microsoft is aware of an issue with Conditional Access policies and macOS 10.15.4 based devices. More information can be found in the the blog post, [Known Issue: Conditional access unexpectedly blocking macOS 10.15.4 native mail client/other apps](https://techcommunity.microsoft.com/t5/intune-customer-success/known-issue-conditional-access-unexpectedly-blocking-macos-10-15/ba-p/1322283).
46
+
44
47
If you block legacy authentication using the **Other clients** condition, you can also set the device platform condition.
45
48
46
49
## Locations
@@ -105,7 +108,7 @@ On Windows 7, iOS, Android, and macOS Azure AD identifies the device using a cli
105
108
106
109
#### Chrome support
107
110
108
-
For Chrome support in **Windows 10 Creators Update (version 1703)** or later, install the [Windows 10 Accounts extension](https://chrome.google.com/webstore/detail/windows-10-accounts/ppnbnpeolgkicgegkbkbjmhlideopiji). This extension is required when a Conditional Access policy requires devicespecific details.
111
+
For Chrome support in **Windows 10 Creators Update (version 1703)** or later, install the [Windows 10 Accounts extension](https://chrome.google.com/webstore/detail/windows-10-accounts/ppnbnpeolgkicgegkbkbjmhlideopiji). This extension is required when a Conditional Access policy requires device-specific details.
109
112
110
113
To automatically deploy this extension to Chrome browsers, create the following registry key:
111
114
@@ -137,7 +140,7 @@ This setting has an impact on access attempts made from the following mobile app
137
140
| --- | --- | --- |
138
141
| Dynamics CRM app | Dynamics CRM | Windows 10, Windows 8.1, iOS, and Android |
139
142
| Mail/Calendar/People app, Outlook 2016, Outlook 2013 (with modern authentication)| Office 365 Exchange Online | Windows 10 |
140
-
| MFA and location policy for apps. Devicebased policies are not supported.| Any My Apps app service | Android and iOS |
143
+
| MFA and location policy for apps. Device-based policies are not supported.| Any My Apps app service | Android and iOS |
141
144
| Microsoft Teams Services - this controls all services that support Microsoft Teams and all its Client Apps - Windows Desktop, iOS, Android, WP, and web client | Microsoft Teams | Windows 10, Windows 8.1, Windows 7, iOS, Android, and macOS |
142
145
| Office 2016 apps, Office 2013 (with modern authentication), [OneDrive sync client](/onedrive/enable-conditional-access)| Office 365 SharePoint Online | Windows 8.1, Windows 7 |
0 commit comments