Users still access my DFS with Global Secure Access without being assigned to my DFS app.

marc moletta 1

I'm testing Global Secure Access (public preview) with some entreprise application configured on it.

My Quick Access give access to other services and we chose to use an entreprise application for our DFS.

Our test user accounts can access DFS but when we removed these accounts from the app, we saw that they were still able to access DFS resources.

Is there something to do about this issue ?

I'm at your disposal for more details.

Givary-MSFT 30,071 Reputation points Microsoft Employee

2024-05-31T11:38:09.5133333+00:00

@marc moletta Thank you for reaching out to us, If you have removed the test user accounts from the enterprise application in Global Secure Access (public preview), but they are still able to access DFS resources, there may be a delay in the revocation of access.

Under conditional access we have this option - Use Global Secure Access security profile (preview) - https://video2.skills-academy.com/en-us/entra/identity/conditional-access/concept-conditional-access-session#use-global-secure-access-security-profile-preview:~:text=protection%20(preview).-,Use%20Global%20Secure%20Access%20security%20profile%20(preview),-Using%20a%20security have you explored it? - Using a security profile with Conditional Access unifies identity controls with network security in Microsoft's Security Service Edge (SSE) product, Microsoft Entra Internet Access. Selecting this Session control allows you to bring identity and context awareness to security profiles, which are groupings of various policies created and managed in Global Secure Access.

Let me know if this doesn't help, will check with my team on this.