Forum Discussion
Henrik Skovgaard
Oct 02, 2019Copper Contributor
Conditional Access with Android phones
I am struggling a bit with Conditional Access policies. I am trying to create the following scenario for access from mobile phones. If the device is marked as compliant (Intune enrolled), then a...
Thijs Lecomte
Bronze Contributor
Could you share your CA policies? Are you using 1 policy or multiple policy?
Have you checked the sign-in logs of Azure AD to check which policies are being assigned?
We need some more info before we can help you out 🙂
Have you checked the sign-in logs of Azure AD to check which policies are being assigned?
We need some more info before we can help you out 🙂
stevenpsiu
Mar 03, 2020Copper Contributor
Thijs LecomteI would like to resurrect this topic, as we are also having this issue with enabling enrolled android devices with native/manufacturer developed email clients.
From the Conditional Access (CA) logs, the android devices did not report back to AAD/CA its compliance status. Its simply blank. See below for screenshot.
Seems like I can only ID the device by OS, not its state. Not sure if this is a limitation on the Android side since iOS is reporting all info to CA.
- Thijs LecomteMar 04, 2020Bronze Contributor
- stevenpsiuMar 04, 2020Copper Contributor
Thijs Lecomte We are using android work profile, they are all personal owned devices.
I am pulling hairs out trying to figure this out.
- Thijs LecomteMar 12, 2020Bronze ContributorI just checked and I am also not seeing it in a couple of tenants.
Are the devices failing on device compliance?