Hello, For one of our customers we created a sign-in policy with 2 realms: 1. "quick acces" without host checker (faster logon with only link to webmail and RDP available) 2. "secure access" with host checker (NC available) In the authentication policy of the "secure access" we only evaluate the host checker policy "secure" (Anti-virus, updates,...). We use custom expressions_ in order to map the roles -> (hostCheckerPolicy = ('secure') AND groups= ("XXXXX")_. But than the remediation page is not shown If we set the policy to Require and Enforce_, the host checker is loaded before the logon page which makes it to slow for only checking the webmail. Any ideas how to show the remediation page when users logon to the "secure access"? Thanks ... View more