---
title: Conditional Access Policy - Exclude Service Provider
slug: conditional-access-policy-exclude-service-provider
docTags: 
createdAt: 2024-10-24T20:50:04.108Z
---

### Step One: Review Conditional Access Policy

::::WorkflowBlock
:::WorkflowBlockItem
Review your Azure AD sign-in logs for the failed attempt
:::

:::WorkflowBlockItem
The user will appear as “SHI Technician”
:::

:::WorkflowBlockItem
Review the Conditional Access Policy details tab

Example:

::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/8HMTHenPEh9T9bMUsExWN_image.png" size="46" width="642" height="773" position="center" showCaption="false"}
:::
::::

### Step Two: Exclude Guest User from Conditional Access Policy

::::WorkflowBlock
:::WorkflowBlockItem
Go to the Azure Active Directory page

![](https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/ADONXjVowRwsV32CntT8Q_image.png)
:::

:::WorkflowBlockItem
On the left menu, select the Security page

::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/lmEQIwVWZdw02_flnrCgq_image.png" size="64" width="644" height="795" position="center" showCaption="false"}
:::

:::WorkflowBlockItem
Click on Conditional Access

::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/p59VnapMC4_RU7CezALhv_image.png" size="44" width="364" height="744" position="center" showCaption="false"}
:::

:::WorkflowBlockItem
Select Policies in the left menu

::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/75wd5IdRdjW3FaIOg7Pug_image.png" size="46" width="341" height="731" position="center" showCaption="false"}
:::

:::WorkflowBlockItem
Select the conditional access policy you want to exclude a user from
:::

:::WorkflowBlockItem
Click on Users or Workload Identities
:::

:::WorkflowBlockItem
In the Exclude tab, click on Select Excluded Users
:::

:::WorkflowBlockItem
Exclude any guest or external account classified as a “Service Provider User” through your conditional access policy
:::

:::WorkflowBlockItem
Save the changes and the user/group selected is now excluded from the conditional access policy

::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/HIf4Dq4--NC-UdKvOkfGg_image.png" size="70" width="819" height="839" position="center" showCaption="false"}
:::
::::