Conditional Access for Partner Center, Managed Devices Only

[lakings27]

Hello- I know that we are supposed to comply with MFA for the partner portal and we do. I am requesting an additional feature be added. We heavily use conditional access in our organization, and we love it. We have locked down our internal resources so you can't access them unless you are on an intune managed device deployed by our internal IT. We can do this for all of our apps and resources EXCEPT for the partner center. By not having conditional access to the partner center, it leaves a massive hole in our organization's security and puts our client's at risk. While MFA is essential, adding an additional layer of protection like conditional access is enormous. Please add.

If we can do this now, please let me know how to accomplish this. Thank you!

[JamesJensen]

Any progress on this?  We are doing a big push into locking down different services to managed devices and/or trusted locations.

This seems like a major piece missing in Conditional Access

[JanoschUlmer]

I would recommend to give feedback on the Azure Feedback community: Azure Active Directory: Conditional Access (226 ideas) – Customer Feedback for ACE Community Tooling

[JanoschUlmer]

Have you tried to use reverse logic in the CA policies? Partner Center is not an app you can choose from when creating the policies, but if you create a policy which you apply to everything but all known apps (=set an exception for all apps you can choose in the CA policy dialogue), the rule will apply to everything else which is authenticated via AzureAD, also the Partner Center.

Certainly this is only a workaround - having Partner Center as app in the conditional access rules is indeed a good idea