Roam Identity, Intune and Secondary Mailbox

Hi,

A bit of a combination I could do with some advice on.

At present we have an AVD Host Pool that is not Hybrid join, so straight forward domain joined. Been around for a while. We are looking to move them to Hybrid join and Intune.

This host pool and users have a secondary mailbox in Outlook. So they have two separate accounts.

We log in with the primary account into Outlook and then they add their second account.  All fine.

We then moved them to a pool which was hybrid joined instead.  Found the primary account was ok, but the secondary Outlook account required the username and password at every logon. My guess was the Roam Identity option of FSLogix where its storing the tokens.   So being clever thought its losing the token at every logon. So we turned Roam Identity on. 

A few days later we noticed the machine was not hybrid joined anymore and basically isn't authenticating with Entra ID.

On reading the notes, in bold letters, do not enable Roam Identity whilst joined to Intune. Good advice.

So we turned it off and soon enough the machine re-appeared, but has now broken the login for the second outlook mailbox.

Anyone got any advice for this rock and a hard place situation, the customer wants the session hosts in Intune.

Thanks.

Kev