Set up app-based conditional access policies with Intune
Set up app-based conditional access policies for apps that are part of the list of approved apps. The list of approved apps consists of apps that were tested by Microsoft.
This article walks through the steps to add an app-based conditional access policy. You can use the same steps when add apps like SharePoint Online, Microsoft Teams, and Microsoft Exchange Online from the list of approved apps.
Create app-based conditional access policies in Azure AD workload
IT admins can create app-based conditional access policies from the Azure AD workload. This access means you don't need to switch between the Azure and the Intune workloads.
You need to have an Azure AD Premium license to create Azure AD conditional access policies from the Intune Azure portal.
To create an app-based conditional access policy
You need to have Intune app protection policies applied to your apps before using app-based conditional access policies.
In the Intune Dashboard, choose Conditional access.
In the Policies pane, choose New policy to create your new app-based conditional access policy.
Once you enter a policy name and configure the settings available in the Assignments section, then choose Grant under the Access controls section.
Choose Require approved client app, choose Select, then choose Create to save the new policy.