I'm trying to set up OAuth for our Canon IR-Adv printers, and I've run into a bit of a snag. The connection status on the printer says 'Successfully Connected', but when I try to log in, I get an error: 'Your sign-in was successful but your admin requires the device requesting access to be managed by Contoso to access this resource.' I've excluded 'Application for Sending E-Mail/I-Fax with OAuth' from our conditional access policy that requires compliant devices, but it's still blocking access. Has anyone figured out how to resolve this? Also, I've found that excluding both the application and the user account used for device login is necessary for it to work.
1 Answer
It sounds like your conditional access is still enforcing the device management rules. You might need to create a separate conditional access policy specifically for this application that allows unmanaged devices to access the resource. Just because the application is excluded from your current policy doesn’t mean that the user needs to be as well. Try setting up that new policy and see if it changes the outcome!
So even with the application excluded, I should create a new policy just for this situation? Got it, I'll give that a shot!