Merge pull request #2187 from kaylubbaycur/patch-2

Clarifiy browser support section

Author: GitHubber17

articles/active-directory/active-directory-conditional-access-supported-apps.md

@@ -71,6 +71,7 @@ You can disable legacy protocols for SharePoint access by using the Set-SPOTenan
 Exchange offers two main categories of protocols. Review the following options, and then select the policy that is right for your organization.
 
 * **Exchange ActiveSync**. By default, conditional access policies for multi-factor authentication and location are not enforced for Exchange ActiveSync. You need to protect access to these services either by configuring Exchange ActiveSync policy directly, or by blocking Exchange ActiveSync by using Active Directory Federation Services (AD FS) rules.
+
 * **Legacy protocols**. You can block legacy protocols with AD FS. This blocks access to older Office clients, such as Office 2013 without modern authentication enabled, and earlier versions of Office.
 
 ### Use AD FS to block legacy protocol
@@ -118,7 +119,9 @@ By applying the following three rules to the AD FS relying party trust for Micro
     => issue(Type = "http://schemas.microsoft.com/authorization/claims/permit", Value = "true");
 
 
-## Supported browsers
+## Supported browsers for device based policies
+
+Access can only be granted for device based policies, that check for device compliance and domain join, when Azure AD can identify and authenticate the device. While most checks, like location and MFA work on most devices and browsers, device policies require of the OS version and browsers listed below. A user on an unsupported browser or OS will have their access blocked when a policy is in device policy is in place.
 
 | OS                     | Browsers                 | Support     |
 | :--                    | :--                      | :-:         |