{"id":8970,"date":"2025-06-17T05:29:13","date_gmt":"2025-06-17T05:29:13","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=8970"},"modified":"2025-06-17T05:29:15","modified_gmt":"2025-06-17T05:29:15","slug":"cannot-exclude-microsoft-teams-app-in-conditional-access-1fec8e78-bce4-4aaf-ab1b-5451cc387264","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/cannot-exclude-microsoft-teams-app-in-conditional-access-1fec8e78-bce4-4aaf-ab1b-5451cc387264","title":{"rendered":"Cannot Exclude Microsoft Teams app in conditional access\u00a0&#8211; 1fec8e78-bce4-4aaf-ab1b-5451cc387264"},"content":{"rendered":"\n<p><\/p>\n\n\n\n<p><strong><u>Issue Analysis:<\/u><\/strong><\/p>\n\n\n\n<p>With reference to our conversation, it\u2019s not possible to exclude the Microsoft Teams desktop app separately in Conditional Access (CA). It\u2019s bundled within the Microsoft Teams Services that you\u2019ve already added.&nbsp;<\/p>\n\n\n\n<p><strong><u>Resolution:<\/u><\/strong><\/p>\n\n\n\n<p>In this scenario,&nbsp;we\u2019ve found a workaround for you:&nbsp;<br>We\u2019ll continue excluding the entire Teams Services in your original CA and then create a new CA policy that specifically blocks access via Teams on the browser.&nbsp;<\/p>\n\n\n\n<p>Please follow these steps to configure this setup:&nbsp;<br>1. Keep your original CA as it is (with Teams Services excluded).&nbsp;<br>2.&nbsp;Create a new CA to block access to Teams via browser and other methods &#8211; so only the Teams App will be allowed.&nbsp;<\/p>\n\n\n\n<p><strong>Target resources<\/strong>: select Microsoft Teams Services&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-4.png\"><img loading=\"lazy\" decoding=\"async\" width=\"657\" height=\"720\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-4.png\" alt=\"\" class=\"wp-image-8973 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-4.png 657w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-4-274x300.png 274w\" sizes=\"auto, (max-width: 657px) 100vw, 657px\" \/><\/a><\/figure>\n\n\n\n<p><strong>Conditions&nbsp;<\/strong>-&gt; Client apps -&gt; Configure: Yes -&gt; Apply to: Browser &amp; Others&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-5.png\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"360\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-5.png\" alt=\"\" class=\"wp-image-8974 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-5.png 800w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-5-300x135.png 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-5-768x346.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/figure>\n\n\n\n<p><strong>Grant<\/strong>: Block access:&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-3.png\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"369\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-3.png\" alt=\"\" class=\"wp-image-8972 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-3.png 800w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-3-300x138.png 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/06\/image-3-768x354.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Issue Analysis: With reference to our conversation, it\u2019s not possible to exclude the Microsoft Teams desktop app separately in Conditional Access (CA). It\u2019s bundled within the Microsoft [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-8970","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/8970","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=8970"}],"version-history":[{"count":1,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/8970\/revisions"}],"predecessor-version":[{"id":8975,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/8970\/revisions\/8975"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=8970"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=8970"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=8970"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}