We are evaluating Zscaler and trying to test Azure (and later Google) tenant restrictions.
I have created the tenant profile but don’t see any restrictions in place.
Is there another step? Do we need to avoid the “recommended” One Click option in order to have the Microsoft login requests decrypted?