Microsoft Teams: Review Conditional Access policies to prevent sign-in issues on Teams Android devices

Microsoft is rolling out stricter Conditional Access policies for Teams Android devices by mid-October 2026, which may cause sign-in issues if resource-specific policies block access. Organizations should review and adjust exclusions in Conditional Access policies and check sign-in logs to resolve problems.

[What and why]

To strengthen platform security, access to some resources may be subject to stricter Conditional Access policy evaluation, which may cause sign-in issues on Teams Android devices. The rollout will occur for app version 1449/1.0.96.2026249711 and is targeted to complete by mid-October 2026.

[Rollout schedule]

• General Availability (Worldwide and GCC): Rollout began in late September 2026 and is expected to complete by mid-October 2026.

[Impact on your organization]

Who is affected

• Organizations that use Teams Android devices and have resource-specific Conditional Access policies configured.
• Administrators responsible for managing Microsoft Entra Conditional Access policies for Teams Android devices.

Platforms and services

• Microsoft Entra Conditional Access
• Microsoft Teams
• Teams Rooms on Android
• Teams phones
• Teams displays
• Teams panels

What will happen

• Teams Android devices may experience sign-in issues if required resources are blocked by Conditional Access policies.

[Action required and recommendations]

No action may be required if your tenant has not configured resource-specific Conditional Access policies for Teams Android devices. If your tenant has configured resource-specific Conditional Access policies and is experiencing sign-in issues:

• Ensure the following commonly blocked resources are included in the exclusion list:
  • Microsoft 365 App Catalog Services (e8be65d6-d430-4289-a665-51bf2a194bda)
  • Marketplace Extensions Runtime (08ff1ce2-4973-4b08-86a3-ebed13badc7f)
  • Office Voice Front Door (446f6ff1-f129-4dd2-930e-c5c620fb4121)
• Review the interactive and non-interactive Microsoft Entra sign-in logs for the affected room resource account to identify any blocked sign-ins.
• Since the affected resource may vary, confirm the blocked resource and applicable Conditional Access policy in the sign-in logs before making changes to your policies.
• Sample Resource Blocking Conditional Access Policy:
  • 

[Learn more]

• Fix Conditional Access-related issues for Teams Android devices - Microsoft Teams | Microsoft Learn
• Targeting Resources in Conditional Access Policies - Microsoft Entra ID | Microsoft Learn
• New-MgServicePrincipal (Microsoft.Graph.Applications) | Microsoft Learn

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.