adding note about studio UI

Author: Larry Franks

articles/machine-learning/how-to-integrate-azure-policy.md

@@ -56,6 +56,9 @@ You can also assign policies by using [Azure PowerShell](../governance/policy/as
 
 To control who can access your Azure Machine Learning workspace, use Azure Active Directory [Conditional Access](../active-directory/conditional-access/overview.md).
 
+> [!IMPORTANT]
+> Azure Machine Learning studio cannot be added in cloud apps in Azure AD Conditional Access, as the studio UI is a client application.
+
 ## Enable self-service using landing zones
 
 Landing zones are an architectural pattern to set up Azure environments that accounts for scale, governance, security, and productivity. A data landing zone is an administator-configured environment that an application team uses to host a data and analytics workload.

articles/machine-learning/how-to-setup-authentication.md

@@ -319,6 +319,9 @@ print(ml_client)
 As an administrator, you can enforce [Azure AD Conditional Access policies](../active-directory/conditional-access/overview.md) for users signing in to the workspace. For example, you 
 can require two-factor authentication, or allow sign in only from managed devices. To use Conditional Access for Azure Machine Learning workspaces specifically, [assign the Conditional Access policy](../active-directory/conditional-access/concept-conditional-access-cloud-apps.md) to Machine Learning Cloud app.
 
+> [!IMPORTANT]
+> Azure Machine Learning studio cannot be added in cloud apps in Azure AD Conditional Access, as the studio UI is a client application.
+
 ## Next steps
 
 * [How to use secrets in training](how-to-use-secrets-in-runs.md).

articles/machine-learning/v1/how-to-setup-authentication.md

@@ -257,6 +257,9 @@ ws = Workspace(subscription_id="your-sub-id",
 As an administrator, you can enforce [Azure AD Conditional Access policies](../../active-directory/conditional-access/overview.md) for users signing in to the workspace. For example, you 
 can require two-factor authentication, or allow sign in only from managed devices. To use Conditional Access for Azure Machine Learning workspaces specifically, [assign the Conditional Access policy](../../active-directory/conditional-access/concept-conditional-access-cloud-apps.md) to Machine Learning Cloud app.
 
+> [!IMPORTANT]
+> Azure Machine Learning studio cannot be added in cloud apps in Azure AD Conditional Access, as the studio UI is a client application.
+
 ## Next steps
 
 * [How to use secrets in training](../how-to-use-secrets-in-runs.md).