Announcing Public Preview of Power Apps respecting Conditional Access on individual apps

Power Platform governance capabilities continue to expand and this latest addition allows organizations using Azure Active Directory (AAD)   to secure resources with finer granularity in Power Apps. For instance, apps with sensitive data can enforce one or more Conditional Access policies. You can decide additional apps that would need to enforce any Conditional Access policies based on your organizations policies.. Conditional Access no longer needs to be an all-or-nothing-application across all Power Apps. This finer granularity of Conditional Access on individual apps is available in public preview, this support leverages Azure AD’s Conditional Access authentication context which is also in preview.

The granular application of Conditional Access enables many scenarios including:

1. Some but not all apps can require end-users to perform Multi-factor authentication.
2. Some but not all apps can require end-users to be connected to their Intranet to access the app.
3. Some but not all apps require end-user connect from a device that is compliant with the organization’s device management policies.
4. Apply different Conditional Access requirements for apps available in Power Apps Mobile. E.g. The ‘Team Morale app’ no longer needs to require running on the Intranet like the ‘Business finances app’.
5. Different Conditional Access policies can be applied to an app that exists in different environments, e.g. Dev, UAT, Production environments.

The following screenshots illustrate the experience when end-users are required to perform Multi-factor authentication when an individual app is launched.

Power Platform admins can use this capability today. To get started, it’s recommended you proceed with these steps:

1. Audit your Azure AD Conditional Access policies
2. Audit canvas apps where you’re interested in applying Conditional Access policies
3. Create Conditional Access authentication contexts for each policy you wish to apply to an app. Note, this may require partnering with another admin in your organization to create the required Conditional Access policies or authentication contexts.
4. Add authentication contexts to your preferred apps.

You can watch a Power CAT Live video highlighting this capability which includes a demo here.

You can find the full documentation here.

Stay tuned, we expect to introduce respecting Conditional Access on other individual Power Platform resources in the future.