Azure Active Directory Conditional Access Policies – Get-AzureADMSConditionalAccessPolicy : Error converting value “linux” to type


If you are trying to run the Get-AzureADMSConditionalAccessPolicy to list Azure Active Directory Conditional Access (CA) policies, you could get the following error:

Get-AzureADMSConditionalAccessPolicy : Error converting value “linux” to type
‘Microsoft.Open.MSGraph.Model.ConditionalAccessDevicePlatforms’. Path
‘value[2].conditions.platforms.includePlatforms[0]’, line 1, position 2708.
At line:1 char:1

  • Get-AzureADMSConditionalAccessPolicy
  • CategoryInfo : NotSpecified: (:) [Get-AzureADMSConditionalAccessPolicy], ApiException
  • FullyQualifiedErrorId : Microsoft.Open.MSGraphV10.Client.ApiException,Microsoft.Open.MSGraphV10.PowerShell.GetAz
    ureADMSConditionalAccessPolicy

The error is connected to one of your CA policies containing a condition that includes Linux as a platform (as in the following screenshot)

Microsoft has no plan to fix it, because Azure AD PowerShell is planned for deprecation (AzureAD). If you need a detailed report of your Conditional Access policies, I suggest the following script (that uses Graph PowerShell Module)

Donovand4/ConditionalAccessPolicyReport: PowerShell Script used to create a report for Azure AD Conditional Access Policies. (github.com)