Conditional Access Problems

How to Configure Conditional Access for Microsoft Forms on Mobile Devices

Khadija Khan Oct 22, 2026 868 views

Question details

The user needs to configure Conditional Access policies to allow enterprise users to securely access Microsoft Forms on their mobile devices.

How to Configure Conditional Access for Microsoft Forms on Mobile Devices

Product: Microsoft Forms
Device & OS: not provided
Scenario: Enterprise administrators setting up mobile access security for Microsoft Forms using Microsoft Entra ID or Endpoint Manager.
Observed behavior: Mobile users are blocked from accessing forms.office.com because the Conditional Access policy lacks the correct cloud application assignments or device compliance settings.

Before you start

Ensure you have the necessary administrator permissions in Microsoft Entra ID (Azure AD) and Microsoft Endpoint Manager to view and modify security policies.

Solution 1Recommended

Include SharePoint Online in Cloud Apps

Microsoft Forms relies on SharePoint Online. Including it in your Conditional Access policy ensures Forms access is correctly managed.

Because Microsoft Forms uses SharePoint infrastructure, any Conditional Access policy that restricts SharePoint will inadvertently restrict Forms. You must explicitly configure the policy to include it.

Sign in to Entra ID

Access Conditional Access Policies

Navigate to 'Protection' > 'Conditional Access' > 'Policies' and select your existing mobile device policy or create a new one.

Select Target Resources

Under the 'Target resources' section, click on 'Cloud apps'.

Add SharePoint Online

Select 'Include', click 'Select apps', and search for 'Office 365 SharePoint Online'. Select it and add it to your policy.

Configure Grant Controls

Under 'Access controls', configure your 'Grant' requirements (such as 'Require device to be marked as compliant'), and save the policy.

Propagation Time: Conditional Access policy updates may take up to 24 hours to fully propagate, though they typically apply within a few minutes. Ask users to clear their mobile browser cache if issues persist.

Solution 2

Diagnose Access Issues Using Sign-in Logs

If users still face issues accessing forms.office.com, analyzing sign-in logs will reveal which specific policy is blocking them.

Free Microsoft Office alternative

Try WPS Office for Seamless Mobile Document Management

Managing enterprise Conditional Access policies for Microsoft 365 can be complex and restrictive for mobile users. If you need a reliable, free alternative for mobile document creation and data collection, WPS Office offers powerful tools with an intuitive mobile interface, eliminating the need for complex server-side access configurations.

1. Download the App: Get WPS Office from the Google Play Store or Apple App Store for free.
2. Create Documents: Open the app to easily create, edit, and view documents, spreadsheets, and presentations.
3. Share Instantly: Share files directly from your mobile device using simple links or integrated cloud storage.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Lightweight, all-in-one mobile app for iOS and Android devices.Easy sharing and collaboration without complicated Conditional Access barriers.Includes built-in form and data collection tools for mobile productivity.

Frequently Asked Questions

Why does my Conditional Access policy for Microsoft Forms require SharePoint Online?

Microsoft Forms stores and processes its data using SharePoint Online infrastructure. To properly regulate access to Forms, administrators must explicitly include 'Office 365 SharePoint Online' in the target cloud applications of the Conditional Access policy.

What should I check if a mobile user's device is marked as non-compliant?

Ensure the user's device is correctly enrolled in Microsoft Intune or your organization's MDM solution. Check Microsoft Endpoint Manager to verify that the device meets all assigned compliance policies, such as minimum OS version and encryption requirements.

Do Conditional Access policies affect external users filling out a form?

If the form is set to 'Anyone can respond', Conditional Access policies do not apply to anonymous external users. However, if the form requires users to log in (e.g., 'Only people in my organization can respond'), external guest accounts may be blocked depending on your Entra ID cross-tenant access settings.

Microsoft Office Security Issues