Terms of use acceptance loops on first login after policy assignment
Scenario
Terms of use acceptance loops on first login after policy assignment. The issue is affecting normal operations and needs a repeatable troubleshooting path that fits the MSP Toolkit style.
Service account blocked after policy intended only for interactive sign-ins
Scenario
Service account blocked after policy intended only for interactive sign-ins. The issue is affecting normal operations and needs a repeatable troubleshooting path that fits the MSP Toolkit style.
Conditional Access template duplicated and now two policies conflict
Scenario
Conditional Access template duplicated and now two policies conflict. The issue is affecting normal operations and needs a repeatable troubleshooting path that fits the MSP Toolkit style.
Trusted network exclusions work for IPv4 but not IPv6 clients
Scenario
Trusted network exclusions work for IPv4 but not IPv6 clients. The issue is affecting normal operations and needs a repeatable troubleshooting path that fits the MSP Toolkit style.
Legacy app protected by app proxy bypasses expected Conditional Access policy
Scenario
Legacy app protected by app proxy bypasses expected Conditional Access policy. The issue is affecting normal operations and needs a repeatable troubleshooting path that fits the MSP Toolkit style.
Session controls block file download in SharePoint but not in Teams preview
Scenario
Session controls block file download in SharePoint but not in Teams preview. The issue is affecting normal operations and needs a repeatable troubleshooting path that fits the MSP Toolkit style.
Mac browser marked unsupported because device ID claim missing from session
Scenario
Mac browser marked unsupported because device ID claim missing from session. The issue is affecting normal operations and needs a repeatable troubleshooting path that fits the MSP Toolkit style.
Policy excludes break-glass accounts yet sign-in frequency rule still applies
Scenario
Policy excludes break-glass accounts yet sign-in frequency rule still applies. The issue is affecting normal operations and needs a repeatable troubleshooting path that fits the MSP Toolkit style.
Named location trusted list updated but browser sessions keep prompting MFA
Scenario
Named location trusted list updated but browser sessions keep prompting MFA. The issue is affecting normal operations and needs a repeatable troubleshooting path that fits the MSP Toolkit style.
Conditional Access report-only logs differ from real enforcement outcome
Scenario
Conditional Access report-only logs differ from real enforcement outcome. The issue is affecting normal operations and needs a repeatable troubleshooting path that fits the MSP Toolkit style.