How to exclude an application from a conditional access policy

Orlando Thompson 0

I am trying to get the official MSFT process to exclude an application from being restricted by a conditional access policy. Can someone please point me in the right direction or provide a link to the official process to exclude app from conditional access policies? Thanks,

Rahul Jindal [MVP] 10,441 Reputation points MVP

2024-02-09T20:03:51.0066667+00:00

Does the exclude app option not work for you? Is it not a standard enterprise app?
Orlando Thompson 0 Reputation points

2024-02-09T20:06:55.3833333+00:00

Where is that option at if you can provide documentation on how this is done that would be perfect and exactly what I am looking for.
Thanks, Rahul,
Orlando Thompson 0 Reputation points

2024-02-09T20:07:23.6+00:00

Where is that option at if you can provide documentation on how this is done that would be perfect and exactly what I am looking for. Thanks, Rahul,
JamesTran-MSFT 36,751 Reputation points Microsoft Employee

2024-02-21T20:13:49.21+00:00

@Orlando Thompson
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
James Hamil 26,486 Reputation points Microsoft Employee

2024-03-01T21:10:44.46+00:00

Hi @Orlando Thompson , did you need any more help with this question? If not could you please mark "Accept Answer" on the appropriate answer so other users can reference it?

Thank you,

James
Lillian654 0 Reputation points

2024-03-02T19:06:12.7566667+00:00
Sign in to the Microsoft Entra admin center as at least a User Administrator.

Browse to Identity > Groups > All groups.

Select New group.

In the Group type list, select Security. ...

Make sure to set the Membership type to Assigned.
solylena lena 0 Reputation points

2024-05-29T17:04:44.18+00:00

To exclude an application from a conditional access policy, you need to follow a series of steps in your Azure Active Directory. First, navigate to the Azure portal and select "Azure Active Directory" from the services menu. Next, go to "Security" and then "Conditional Access." Here, you'll find a list of your existing policies. Choose the policy you want to modify and select "Assignments." Under "Cloud apps or actions," click "Exclude" and then search for the application you wish to exclude. Once you've found it, select the application and save your changes. This will ensure that the specified application is not subjected to the conditional access policy, allowing it to bypass any restrictions or requirements that the policy enforces.

2 answers

Givary-MSFT 34,521 Reputation points Microsoft Employee

2024-02-12T04:01:30.69+00:00

@Orlando Thompson Thank you for reaching out to us, As I understand you are looking for an option to exclude an app from the conditional access policy, we do have include/exclude tab something like this while creating a conditional access policy within Entra ID

Reference:

https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-cloud-apps

Came across this demo of how to exclude and include cloud apps in conditional access policies in Microsoft Entra explained by one of our engineers - https://www.youtube.com/watch?v=Ijfw5FFsAA4

Let me know if you have any further questions, feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Richard Stokes 0 Reputation points

2024-12-09T07:59:59.5466667+00:00

Difficulty is that Exclude does not take priority over Include:

For example, include all apps, but then exclude Office 365 (for example) will still block Office 365
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to exclude an application from a conditional access policy

2 answers

Your answer