question

RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 asked RahulJindal-2267 answered

ConfigMgr - Azure CMG Client App Sign-In Failures

Hi All,

I am hoping someone can shed some light on this. One of my customers tenant has Azure sign-in failures against CMG client app.

163002-image.png

CMG is functional and I am not seeing any obvious issues. There is a CA policy in place to enforce MFA for admins which is failing and is applied for all cloud apps.

163003-image-1.png

Is this normal? Does one need to exclude the ConfigMgr-Server App to fix this?

163004-image-2.png


mem-cm-general
image.png (708.1 KiB)
image-1.png (612.4 KiB)
image-2.png (428.4 KiB)
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

2 Answers

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered RahulJindal-2267 converted comment to answer

Excluding the ConfigMgr-Client App from the CA policy is certainly something I would try since that's what's listed in the failures and enforcing it for this app really has no value.

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 answered

Thanks Jason. Since the resource app is listed as ConfigMgr-Server app in the sign-in data, I excluded that in the CA policy of MFA and that cleared the sign-in errors immediately. Also, I couldn't find ConfigMgr-Client App for exclusions.

While this certainly fixes things and leaving the technical aspect of CA policy aside, I am curious whether excluding the CMG app in CA policy like this is an expected configuration setting or not because I haven't found anything in the official docs that would suggest this as a requirement.

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.