app-modern-authentication-block.md

title	titleSuffix	description	keywords	author	ms.author	manager	ms.date	ms.service	ms.subservice	ms.localizationpriority	ms.topic	ms.assetid	ms.reviewer	ms.suite	search.appverid	ms.custom	ms.collection
Block apps with no modern authentication on Intune	Microsoft Intune	Learn about applications and modern authentication (MSAL) using Microsoft Intune.		Erikre	erikre	dougeby	03/28/2024	microsoft-intune	protect	medium	article	73db3070-d033-40fb-a8f1-58b9d198021e	beflamm	ems	MET150	intune-azure	tier3 M365-identity-device-management sub-device-compliance

Block apps that don't use modern authentication (MSAL)

App-based Conditional Access with app protection policies rely on applications using modern authentication, which is an implementation of OAuth2. Most current Office mobile and desktop applications use modern authentication. However, there are third-party apps and older Office apps that use other authentication methods, like basic authentication and forms-based authentication.

Block access to apps

To block access to apps that don't use modern authentication, use Intune app protection policies to implement Conditional Access. For more information, see App-based Conditional Access with Intune.

Additional information

For more information about Microsoft Entra Conditional Access, see the following topics:

• What is Conditional Access in Microsoft Entra ID?
• How app-based Conditional Access works
• Set up SharePoint Online and Exchange Online for Microsoft Entra Conditional Access

Next steps

• App-based Conditional Access with Intune