Conditional access isn't applied to a group of users on a separate domain

We have a small group of users on a separate domain which is part of the same tenant at our main domain. We've discovered that conditional access policies are not being applied to that group of users. CA policies are applied to all users. Also, sign in logs don't pick up the Device ID and Join Type for the users in question. All of them use BYOD devices.