
Announcements
I have applied conditional access policy to require MFA to my Power App by applying an authentication context to the Power App. I used the cmdlet as detailed in the official documentation from Microsoft.
The associated conditional access policy requires user to authenticate via MFA.
However when the user launches the app, the popup that prompts users to sign in/authenticate can be easily bypassed by hiding the HTML element.
This gives users full access to the functionality of the app without actually authenticating via MFA.
This "Sign-In" Prompt is very different from what we see in the demo PowerCat Demo and official documentation. Does any one have any insight on how to properly implement granular MFA/conditional access policy for Canvas Apps?
Update 10 May:
It seems like the problem resolved itself. The MFA works properly now and the app does not load until MFA is completed.