Fix Chrome Conditional Access Not Sending Device Information
Question details
Users are unable to access organizational resources via Google Chrome due to a Microsoft Entra Conditional Access policy blocking the browser for missing device information.
- Product
- Microsoft Entra ID / Google Chrome
- Device & OS
- not provided
- Scenario
- Attempting to log into corporate web applications or portals using Google Chrome under a strict Microsoft Entra Conditional Access policy.
- Observed behavior
- Chrome is blocked because it fails to pass device identity information to Microsoft Entra, whereas Microsoft Edge succeeds under the exact same policy.
Ensure your device is properly registered or joined to your organization's Microsoft Entra ID and that you have administrator contact details ready for policy verification.
Verify and Reconfigure the Windows Accounts Extension
Ensure the required extension is properly installed and allowed to run, enabling Chrome to pass device details to Entra ID.
Google Chrome cannot natively pass Windows device compliance information to Microsoft Entra ID. It relies entirely on the 'Windows Accounts' extension to bridge this gap.
Open Google Chrome, navigate to 'chrome://extensions', and ensure the 'Windows Accounts' extension is both installed and toggled on.
If you are trying to access resources in an Incognito window, click 'Details' on the Windows Accounts extension and enable 'Allow in Incognito'.
Clear Chrome's cache and cookies, then restart the browser to force a new authentication token request to Microsoft Entra.
If the issue persists, gather your policy configuration, Chrome version, extension status, and device-management details, and post them in the Microsoft Q&A Conditional Access community for specialized IT support.
Use Microsoft Edge as an Immediate Workaround
Bypass the Chrome limitation by using a browser with native Entra ID integration.
Avoid Browser Access Issues with WPS Office
If Microsoft Entra Conditional Access policies are preventing you from accessing Office 365 on the web via Chrome, consider switching to WPS Office. It provides a powerful, free desktop suite that lets you work offline without relying on complex browser-based authentication.
- 1. Download the Installer: Visit the official WPS Office website and download the free desktop application for your operating system.
- 2. Install WPS Office: Run the setup file and follow the on-screen instructions to install the suite on your local device.
- 3. Open and Edit Microsoft Files: Launch WPS Office and directly open your .docx, .xlsx, or .pptx files to continue working seamlessly offline.
Frequently Asked Questions
Why does Conditional Access work in Edge but not Chrome?
Microsoft Edge natively supports Windows Single Sign-On (SSO) and passes device identity and compliance status directly to Microsoft Entra ID. Google Chrome lacks this native integration and requires a specific Microsoft extension to perform the same function.
What is the Windows Accounts extension?
It is a browser extension provided by Microsoft that allows Google Chrome to securely pass device information and identity tokens to Microsoft Entra ID, ensuring the browser can satisfy Conditional Access policy requirements.
Can a Conditional Access policy explicitly block Chrome?
Yes, administrators can configure policies to block specific browsers, require approved client apps, or mandate device compliance. If Chrome fails to pass device details, Entra ID treats it as an unmanaged or non-compliant device and blocks it.
Who should I contact to resolve Entra ID policy blocks?
You should contact your organization's IT administrator or helpdesk. Provide them with the correlation ID from your error screen, your browser version, and your device name so they can check the Entra sign-in logs.
