Forum Discussion
Bharat Chand
Aug 13, 2020Copper Contributor
Blocking GMAIL APP iOS using CA
Hi, What is the best ca combination to block the gmail app for email configuration on iOS. We can block iOS native plus android native but gmail app which uses imap4 cant be blocked on iOS. ...
Thijs Lecomte
Aug 13, 2020Bronze Contributor
You should block legacy authentication using Conditional Access.
If that is not an option, you can block it at Exchange Online level - https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android#option-1-block-all-email-apps-except-outlook-for-ios-and-android
If that is not an option, you can block it at Exchange Online level - https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android#option-1-block-all-email-apps-except-outlook-for-ios-and-android
Bharat Chand
Aug 13, 2020Copper Contributor
Well i saw that so its exactly the same but somehow able to configure gmail.
And you can tru yourself and see if you are successful in blocking gmail and somehow gmail app show office 365 as an option for configuration.
And you can tru yourself and see if you are successful in blocking gmail and somehow gmail app show office 365 as an option for configuration.
- Thijs LecomteAug 13, 2020Bronze ContributorIs the ca policy applying to that sign-in?
Could you share me your current policy?- Bharat ChandAug 13, 2020Copper ContributorHi,
I know we can block access using pshell device policy on exchange online but we want to leverage ca.
So we have 3 ca policy as exactly the same describe in the article that you share except we are not using app protection because not all MS Apps are covered under that only approved apps.
1 st ca with approved apps
Than policy for EAS
Third blocking the legacy authentication
So eve- Thijs LecomteAug 13, 2020Bronze ContributorCan you check and troubleshoot the sign-in logs?
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/troubleshoot-conditional-access#policy-details