Forum Discussion

Brass Contributor

Jul 21, 2020

Office 365 Mobile device management authentication

Hello, following scenario: User have Office 365 E1 and Azure AD P1 license. We have configured Office 365 "MDM", not the Intune MDM, only O365 MDM. We want, that only trusted mobile devices (...

Bronze Contributor

Jul 22, 2020

Hi

This article should answer most of your questions.
A few things are being changes in the future: https://techcommunity.microsoft.com/t5/exchange-team-blog/upcoming-exchange-online-device-access-and-conditional-access/ba-p/1464261

Marc Mönnikes
Brass Contributor
Jul 22, 2020
Thijs Lecomte

Hello,

thanks for your reply.
The question for me is:
Is it possible and supported to use Conditional Access also for "built in mobile device management"

i have found this link:

https://www.microsoft.com/en-us/microsoft-365/blog/2015/07/21/explore-the-built-in-mobile-device-management-mdm-feature-for-office-365/
and this part on the website

So, correct me if i am wrong:

Built in MDM will also check device comliance against Azure AD Conditional Access and we can protect our mobile devices and the access.
It is not an "Intune only" feature.

Regards
- Pablomcse
  MCT
  Jan 30, 2021
  Marc Mönnikes good evening.
  
  You could use Conditional access having AD P1, but you can´t create a policy based on the device compliance due you are not using Endpoint Management (Intune). You can enforce conditional access with MFA for example.
  Here you can find what kind of conditional policies you can deploy :
  Conditional Access - Require MFA for all users - Azure Active Directory | Microsoft Docs
  
  I hope this can help.
  
  Good luck
- Thijs Lecomte
  Bronze Contributor
  Jul 27, 2020
  No, O365 might check Conditional Access (which happens everytime you authenicate to O365); but it won't check the device compliance in O365 MDM as compliance is an Intune feature

Resources