Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune

How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune

Written By Anoop C Nair
Last Updated July 1, 2026
Posted In Intune
SHARE

Let’s discuss How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune. Admins facing issue with an Azure AD Conditional Access Policy that seems to be causing a loop when users access Office 365 resources using Microsoft Edge on Windows 11 24H2 BYOD devices.

The policy is titled “Require App Protection Policy for Edge on Windows for All Users when Browser and Non-Compliant-v1.0” and continuously prompts users to switch profiles in Edge. These devices are BYOD and intentionally excluded from full Intune management (non-compliant by design).

However, Edge repeatedly requests authentication or profile switching, creating a frustrating experience. Admin applied this policy to Windows devices using browsers (primarily Edge) and includes Office 365 applications. Admin excluded Compliant devices or those with trustType = ServerAD.

To fix the issue admins tried several methods but the issue is not resolved yet. Admin confused that, could this be an issue with how Edge handles profile authentication in Conditional Access scenarios? In this blog post, i will help you to resolve the issue.

Patch My PC
How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune - Fig.1
How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune – Fig.1

How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune

With this issue, admins goal is to secure access using App Protection Policies (MAM) for BYOD scenarios without requiring full device enrollment in Intune. As mentioned above admins tried several resolution methods. The table below shows the methods tried by Admin.

Methods
With this issue, admins goal is to secure access using App Protection Policies (MAM) for BYOD scenarios without requiring full device enrollment in Intune.
Checked Azure AD Sign-In Logs for errors or repetitive authentications.
Cleared Edge browser cache and cookies.
Ensured Edge is configured to use Windows sign-in information.
Adjusted the App Protection Policy settings for Edge.
How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune – Table.1
How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune - Fig.2 - Creds to MS
How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune – Fig.2 – Creds to MS

Causes of the Issue

There are different causes are reasons for the issue. Edge may be unable to persist the correct work profile when switching between personal and corporate contexts. This leads to repeated prompts to switch profiles or re-authenticate, especially when Conditional Access policies require App Protection.

How to Fix Issue

You can follow several methods like Compliance verification steps, Edge browser configuration, Sign-in log analysis. App Protection Policy adjustments etc to resolve this issue. The following are the other methods.

Use Report-Only Mode First

Set the Conditional Access policy to Report-only mode to monitor impact before enforcing. This helps identify which users or devices are triggering the loop without blocking access.

Refine Policy Filters and Assignments

Exclude BYOD user groups explicitly from the policy. Use device filters to better target unmanaged devices without triggering MDM enrollment. Consider segmenting policies by device trust type or registration status.

How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune - Fig.3
How to Fix Conditional Access Misconfiguration Causing Edge Authentication Loop in Intune – Fig.3

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read