Compatibility Issue with Zen Browser and Azure AD Conditional Access Device Identification

[WayneYu921]

Hello,

I'm experiencing a login issue on macOS (version 10.15 or later) when using Zen Browser (based on the Firefox core) for AWS Single Sign-On (SSO), which is authenticated via Azure AD.

The specific situation is as follows:

• The authentication process uses Azure AD Conditional Access.
• Our corporate Conditional Access policy requires a "Compliant device".
• When attempting to sign in with Zen Browser, the request is denied with error code 530001.
• The system displays a message stating that the browser is "not supported" or that it "does not support device identification, and the device status is unknown."
• If I use Microsoft Edge (or a compliant browser like Chrome), the SSO login is successful, and the device status is correctly passed to Azure AD.

My hypothesis is as follows:

• According to official Microsoft documentation, the device identification feature within Azure AD Conditional Access is not supported by all browsers.
• On macOS, Firefox requires the Microsoft Enterprise SSO Plugin to fully pass device compliance information. I'm unsure if Zen Browser supports this plugin or the relevant APIs.
• It appears that Zen Browser, in this specific scenario, is unable to pass the device registration and compliance status to Azure AD, causing it to be identified as an "unsupported browser."