Intune Company Portal Device ConditionalAccessPolicies Bypass

F S@Fsdr

•updated Mar 11, 2026•39•0•410

Detects successful sign-ins to the Microsoft Intune Company Portal (AppId '9ba1a5c7-f17a-4de9-a1f1-6178c8d51223') where Conditional Access Policies (CAP) have failed. This indicates an attempt to bypass device compliance requirements, potentially allowing access from non-compliant or unmanaged devices.