-
Notifications
You must be signed in to change notification settings - Fork 342
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Container tabs not sending Device ID for conditional access compliance. #2670
Comments
@MrMellie can you reproduce this issue using private browsing instead of a container? |
Hi, I haven't tried Private Browsing, but from memory, any private session doesn't send device ID either. Edit: just tried it and get the same error as container tabs. You can't get there from here Devices or client applications that meet management compliance policy. |
Hi, I started to face the same issue today when up to today it was fine, I have tried on an anonymous tab and it is the same error as with the containers. |
Thanks. Can you tell me how I can reproduce the issue? |
Hi Balkuf, the steps to reproduce are in the initial post under Steps To Reproduce :) If you haven't got access to an Azure tenant with conditional access policies that require a device ID, you might struggle though. |
Right so, lets say you login to portal.azure.com, that works fine, as soon as you open a incognito or a container, when you try to open it said that your sign-in was successful but it only managed devices are allowed, as per that, if you opened the Funnily enough the very next day after I replied, it was fixed, i guess it was something mozilla // microsoft messed up, (not their first rodeo.) so now it just works.. |
Before submitting a bug report
Step to reproduce
Actual behavior
After trying to sign in, Entra/Azures gives an error message indicating my device is not compliant.
Expected behavior
It should log in just like a non-container tab.
Additional informations
The container tabs are not sending the device ID as a signal to enable logins to pass CAP where trusted devices are a requirement. Regulat tabs within Firefox are sending the device ID okay. This is not to be confused as a SSO issue - Windows SSO is turned OFF and not required for normal or container tabs in this scenario.
Provide a copy of Troubleshooting Information page (optional)
Sign in log details:
Authentication requirement
Multifactor authentication
Status
Failure
Continuous access evaluation
No
Sign-in error code
53000
Failure reason
Device is not in required device state: {state}. Conditional Access policy requires a compliant device, and the device is not compliant. The user must enroll their device with an approved MDM provider like Intune.
Additional Details
Your administrator might have configured a conditional access policy that allows access to your organization's resources only from compliant devices. To be compliant, your device must be either joined to your on-premises Active Directory or joined to your Azure Active Directory.
Device ID
Browser
Firefox 130.0
Operating System
Windows10
Compliant
No
No response
The text was updated successfully, but these errors were encountered: