Fix Conditional Access-related issues for Teams Android devices

Publisher

Microsoft

URL

https://learn.microsoft.com/en-us/troubleshoot/microsoftteams/teams-rooms-and-devices/teams-android-devices-conditional-access-issues

Published

2024-05-26

Updated

unknown

Accessed

2026-09-30

HTTP status

200

License

Microsoft Learn terms of use; copyright Microsoft (licence text not inspected); no-redistribution; short excerpts and locators only

Source notes citing this source

• When Conditional Access policies apply to the Teams service, noncompliant Teams Android devices can fail to sign in or get stuck in sign-in loops, sign out of Teams at random, or have Teams stop responding. in context
• Once the failing Conditional Access policy is identified, Microsoft's resolution is to exclude the affected device with a device filter; device filters apply only to device objects, and the model and manufacturer attributes are available only for Intune-enrolled devices, otherwise extension attributes must be used. in context
• As Teams Android devices move to Intune AOSP device management, the device.displayName attribute carries manufacturer information early in the sign-in process, before Intune completes enrollment, so Microsoft suggests it for Conditional Access device filter rules. in context
• If a device is marked noncompliant, the Microsoft Entra token-issuing service stops renewing or revokes its tokens, so the device cannot get an updated authentication token and is forced to sign out. in context
• With a Conditional Access sign-in frequency setting, each forced reauthentication revokes the token and creates a new device object under the user account, and once the number of device objects exceeds the Microsoft Entra or Intune device limit the user can no longer sign in to the device. in context
• To check a Conditional Access sign-in failure manually, Microsoft directs the admin to the Entra sign-in logs, User sign-ins (non-interactive) tab, filtered to Status Failure and Application Teams, then to entries for Microsoft Teams, Microsoft Teams Service or Microsoft Teams - Device Admin Agent, then to the sign-in error code and failure reason on Basic info, then to the Conditional Access tab for policies showing Failure. in context

Cite this source record

APA

WarmTransfer. (2024, May 26). Fix Conditional Access-related issues for Teams Android devices. WarmTransfer. https://warmtransfer.net/knowledge/sources/ms-learn-ts-android-ca-issues

BibTeX

@misc{warmtransfer-ms-learn-ts-android-ca-issues,
  title  = {Fix Conditional Access-related issues for Teams Android devices},
  author = {{WarmTransfer}},
  year   = {2024},
  url    = {https://warmtransfer.net/knowledge/sources/ms-learn-ts-android-ca-issues},
  note   = {Microsoft, accessed 2026-09-30}
}