Cloud apps
Cloud apps are Entra ID Enterprise applications that represent the Microsoft cloud or third-party applications. This could be, for example, Windows 365, AVD, a Software as a Service (SaaS) application, or Office 365 services.
To enforce different Conditional Access settings per cloud app(s), you can create different policies that only apply to that specific application to customize access:
If you want to enable Azure MFA for Windows 365, you need to select Windows Cloud Login, Windows Virtual Desktop, and Windows Virtual Desktop Client.
Figure 13.20: Selecting cloud apps
Cloud apps are usually named after the service; otherwise, you have to select them according to the right app ID, such as 0af06dc6-e4b5-4f28-818e-e78e62d137a5
.
Aside from filtering on cloud apps, you could also apply Conditional Access settings during actions, for example, the process of registering and joining devices to Microsoft Intune. You must then select user actions...