Recently we have started to see an issue where devices(macOS) are dropping out of Azure AD. We can run through the Intune device registration via Company Portal with no issues, and the device will show compliant and is listed as such in InTune, however the device never appears in Azure AD.
Conditional Access apps will work on these devices for about a day, and then I guess when the JamfAAD check occurs(assuming this is daily?) the user then has no conditional access at all and we have to remove the device from inTune and re register.
Is anyone else seeing anything similar? This all came to light about 2 weeks ago. I have a case open with Microsoft, but so far zero response. What's puzzling to me is not all devices have this behavior, some upon new registration or reregistering show up in AAD just fine.