Microsoft Compliance Partner conditional access demo

[rachaelshaw]

Goal

User story
As an IT admin evaluating Fleet Premium,
I want to watch a demo video of conditional access
so that I can evaluate that feature.

Key result

Become a Microsoft compliance partner

Original requests

• #24423

Context

• Product Designer: @rachaelshaw

Changes

Product

• [ ] Demo video:

  • On Policies page, show:
    • Select an MDM-enrolled demo host's team.
    • Go to Manage automations > Conditional access.
    • Select a policy that is failing on the demo host.
    • Save.
  • Attempt to sign in using Microsoft Entra.
    • Show being blocked from logging in.
    • Show page at fleetdm.com/remediate.
  • On My device page:
    • Click on policy with Action required status.
    • Show instructions to fix the failing policy.
  • On the device, fix the policy.
  • Go back to My device page and click Refetch.
  • Attempt to sign in again using Microsoft Entra.
    • Show access is restored.

• [ ] UI changes: No changes

• [ ] CLI (fleetctl) usage changes: No changes

• [ ] YAML changes: No changes

• [ ] REST API changes: No changes

• [ ] Fleet's agent (fleetd) changes: No changes

• [ ] GitOps mode changes: No changes

• [ ] Activity changes: No changes

• [ ] Permissions changes: No changes

• [ ] Changes to paid features or tiers: No changes

• [ ] My device and fleetdm.com/better changes: No changes

• [ ] First draft of test plan added

• [ ] Other reference documentation changes: Add YouTube embed to the guide for conditional access

• [ ] Once shipped, requester has been notified

• [ ] Once shipped, dogfooding issue has been filed

Engineering

Once the feature is demo-able, create a video showing the conditional access based on a passing/failing policy.

• [x] Test plan is finalized - No need
• [x] Contributor API changes: No changes
• [x] Feature guide changes: No changes
• [x] Database schema migrations: No changes
• [x] Load testing: No changes

ℹ️  Please read this issue carefully and understand it. Pay special attention to UI wireframes, especially "dev notes".

QA

No QA needed

[nonpunctual]

Heads up: @noahtalerman @marko-lisica @eugkuo https://community.jamf.com/t5/tech-thoughts/upcoming-change-device-compliance-integration-for-macos-sso/ba-p/358895

[noahtalerman]

https://community.jamf.com/t5/tech-thoughts/upcoming-change-device-compliance-integration-for-macos-sso/ba-p/358895

Thanks Brock! Heads up that the #g-orchestration team is working on this so we want to tag @rachaelshaw (Product Designer for #g-orchestration).

FYI @lucasmrod

[noahtalerman]

Key result

Become a Microsoft compliance partner

Original requests

• #24423

Hey @rachaelshaw just a reminder to fill out the "Key result" and "Original requests" sections when you spin up new GitHub issues. It helps us as Product Designers and the rest of the business when we're asking questions like "does this address the entire request? A piece of it?"

[lukeheath]

@jacobshandling @sharon-fdm I am leaving this on the Orchestration project board and assigned to milestone 4.70.0 because it technically shipped and was announced. Once this reaches "Ready for release" state, please move it to the Drafting project and the "Confirm and celebrate" column. Thank you!

[rachaelshaw]

@lukeheath @lucasmrod do you know where this video ended up? I found the IT admin experience on YouTube but didn't see the end user experience.

[lukeheath]

I don't know but maybe @sharon-fdm does?

[rachaelshaw]

@noahtalerman do you happen to know where this ended up?

[noahtalerman]

do you happen to know where this ended up?

@rachaelshaw not sure! Filed a request to post the videos if they're not on YouTube already: https://github.com/fleetdm/fleet/issues/31528

cc @onasismunro

[fleet-release]

Conditional access blooms, In the cloud city it looms, Security booms.