Hi all, has anyone experienced applying Citrix policies based on Device Posture? We're doing a Cloud POC and I've been tasked with testing this. I got Device Posture itself working, have it integrated with Intune and its marking devices as Compliant or Not-Compliant as expected. I've enabled Adaptive Access as per the docs. And I've enabled a Citrix Policy for Clipboard Redirection, with Access Control enabled with access condition of Compliant, basically doing like the following guide just enabling it rather than disabling Enforce smart controls on DaaS using Device Posture However the policy itself isn't getting applied to my users. I have made sure that no other policies have a higher priority either. I've checked the SmartAccess filters and can see the Compliant Filter being applied too so it does look like the correct tag is being sent. Switching between my personal PC and Intune managed device I can also see the tag changing in the SmartAccess Filters. Basically just need a sanity check to make sure I've not missed anything? Maybe I'd be better doing a policy to disable rather than enable?

Pretty sure the clipboard policies in Citrix are the most frustrating and inconsistent policies to play with / you’ve chosen a fun path to test :-)

I somehow never had an issue with them in my on-prem site and I've like 5 different ones there enabling or disabling based on source IP, gateway used, AD group, etc. Which I know now is unusual not to have issues with. Maybe I'll switch my focus to some other settings but the fact I don't see the overall policy itself getting applied is making me think it'll be the same deal.

Yeah I’ve had no end of pain with them - likely macOS in the mix doesn’t help. But I’ve completely off topic’d your initial ask 🤦‍♂️ that OSPLATFORM tag looks odd, shouldn’t that be DEVICE_TYPE_WINDOWS?

There is another tag with Device_Type_Windows up further, I just couldn't get them all in one screenshot. Also when I log in on my personal device, the tag Workspace:Compliant does change to Non_Compliant so that's making me think the device posture and tags are correct and I've done something wrong in my policy