Supported Conditional Access and Intune device compliance policies for Microsoft Teams Rooms

Publisher

Microsoft

URL

https://learn.microsoft.com/en-us/microsoftteams/rooms/supported-ca-and-compliance-policies

Published

2026-07-06

Updated

unknown

Accessed

2026-09-30

HTTP status

200

License

Microsoft Learn terms of use; copyright Microsoft (licence text not inspected); no-redistribution; short excerpts and locators only

Source notes citing this source

• In Microsoft's supported-policy table the Conditional Access Authentication flows condition is Not supported for Teams Rooms on Android, Teams phone and Teams panels, with the instruction not to block device code flow. in context
• Authentication strength, including FIDO2 security keys, is not supported in Conditional Access policies that affect Teams devices. in context
• For Teams phones enrolled with AOSP Device Management the supported Intune compliance settings are rooted devices, minimum and maximum operating system version, minimum security patch level and storage encryption; the three password-unlock settings are not supported because Teams devices do not support a password unlock. in context
• Blocking device code flow with Conditional Access prevents using microsoft.com/devicelogin to remotely sign in a Teams Android device. in context
• A tenant that follows the Entra recommendation to block device code flow for all users will break code-based remote sign-in on Teams phones unless the accounts or devices used on those phones are scoped out of that block. inferred in context
• For Teams devices to function, Conditional Access must not block access to Office 365, Office 365 SharePoint Online, Microsoft Teams Services, Microsoft Intune Enrollment and Device Registration Service. in context
• The Require multifactor authentication grant control is listed as Supported for Teams Rooms on Android, Teams phone and Teams panels, with the advice not to enforce it and to use a different secondary authentication factor so that sign-on is seamless. in context
• Sign-in frequency is listed as Not supported for all Teams device types; Microsoft states it causes devices to sign out periodically and that sign-in frequency configured on individual Microsoft 365 services can interrupt or stop the Teams device sign-in flow. in context
• The Terms of Use Acceptance grant control is listed as Not supported for Teams Rooms on Windows and for Teams Rooms on Android, Teams phone and Teams panels. in context

Cite this source record

APA

WarmTransfer. (2026, July 6). Supported Conditional Access and Intune device compliance policies for Microsoft Teams Rooms. WarmTransfer. https://warmtransfer.net/knowledge/sources/ms-learn-supported-ca-compliance-policies

BibTeX

@misc{warmtransfer-ms-learn-supported-ca-compliance-policies,
  title  = {Supported Conditional Access and Intune device compliance policies for Microsoft Teams Rooms},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/ms-learn-supported-ca-compliance-policies},
  note   = {Microsoft, accessed 2026-09-30}
}