Skip to main content
Question

Issues with Conditional Access and User Enrolling with PSSO

  • August 25, 2026
  • 1 reply
  • 35 views

Ryan Mac

Hi,

Pretty new to Jamf and Mac MDM but seem to have the handle on the majority of stuff. 

I’m having a single issue with the users enrolling the devices into PSSO during the simplified set-up. 

I am pretty certain it’s a Conditional access policy we have set within our tenant that blocks access to any cloud resources from Uncompliant devices. 

The guidelines suggest - “The User Registration app for Device Compliance created when you connected Jamf Pro to Intune must be added as an exclusion in any policy that may prevent users from registering their devices.”

And from the logs I can see this is the exact application that is getting blocked on the policy.

The problem, even if I add the exception for this application into this conditional access policy it will still get blocked.

If I add the user to an Exception group, the device enrols perfectly fine. 

Not sure if anyone else has had a similar issue? 

1 reply

mvu
Forum|alt.badge.img+22
  • Jamf Heroes
  • August 25, 2026

I think you have it narrowed down to your Microsoft Entra Conditional Access policy. Can you upload a couple of screenshots of how you have it configured?

Do you happen to have policy target set to “All Cloud Apps” ?