Building, integrating, or customizing apps and workflows within Microsoft Teams using developer tools and APIs
Hi @Petr Honsa
Based on your description, when you try to log into SuccessFactors inside Teams on Android, Teams uses its own built-in browser (WebView), which fails to hand off the authentication request to your Microsoft Authenticator app. Consequently, your Security team sees a "device not recognized" error in the logs.
After researching this behavior, the cause lies in how Microsoft Teams for Android handles authentication for third-party tabs. Teams utilizes an embedded WebView rather than launching an external browser like Edge or Chrome, and it does not natively support redirecting to external browsers for these in-app integrations.
Because of this architectural design, your company’s current Conditional Access (CA) policies are likely blocking the authentication flow because WebView cannot always pass the required device state/compliance signals (managed by Intune) back to Microsoft Entra ID.
Here are the recommended approaches to work around this issue:
-Adjust Conditional Access Policies (For your IT/Security Team)
Since you've already contacted your Security team, you can suggest they review and adjust the Conditional Access policies in Microsoft Entra ID. Modify the policies to explicitly allow authentication flows originating from Microsoft Teams for Android and its embedded WebView. Ensure that CA policies applied to mobile devices are not overly restrictive. It's crucial to distinguish between unmanaged personal devices, personal Intune-enrolled devices, and Teams mobile/shared devices so that WebView traffic from trusted apps isn't inadvertently blocked.
-If modifying the security policies takes time, you can try these alternative ways to access your data:
- Use an External Browser: Instead of launching SuccessFactors inside the Teams app, open Microsoft Edge or Chrome on your Android phone, navigate to your company's SuccessFactors web URL, and log in there.
- Use the Dedicated App: If your organization permits it, download and install the standalone SAP SuccessFactors mobile app from the Google Play Store, which typically integrates much better with Microsoft Authenticator and Intune.
To help narrow this down further, if your Security team can provide the specific Error Code please share it here so we can give you more precise guidance!
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click ""Comment"".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.