Blocking accounts.google.com from non approved device using Cloud identity premium

[Mohit_Pandey]

Dear All,

I have blocked access to google services and few SAML Apps using context aware access.

Only COD or admin device can access the services.  However when some try to access accounts.google.com from an non COD/approved device google still allow users to login and change account information.   Any ideas or suggestions. This becomes a security breach.

Mohit Pandey

[goldyarora]

Context Aware Access is an authorization (not authentication) layer which can be applied to native Google Workspace (e.g Gmail, Drive, meet etc) and SAML apps where Google acts as an IdP.

You can't apply CAA on user profile, you may consider restricting profile editing from Workspace directory settings.