Forum Discussion

JeroenBurgerhout's avatar
JeroenBurgerhout
Iron Contributor
Mar 12, 2020

Block Gmail app to connect to EXO

Hi all,   We are implementing the Outlook app as default mail app on iOS and Android devices. So far, so good. But with testing the CA policy with approved client apps and approved app protection ...
Conditional Access
Intune
Mobile Device Management (MDM)
  • JeroenBurgerhout's avatar
    JeroenBurgerhout
    Mar 12, 2020

    Oké guys.

     

    Thanks for your support, but it is resolved.

    Gmail is indeed using the old legacy IMAP protocol to connect to EXO.

    But it took some time that the CA was working.

     

    So this one is solved and closed.

JeroenBurgerhout's avatar
JeroenBurgerhout
Iron Contributor
Mar 13, 2020

Hi Virre ,

 

First you have to follow steps 1 and 2 from this link -> https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-protection-based-conditional-access#scenario-1-office-365-apps-require-approved-apps-with-app-protection-policies

 

Second, follow this doc -> https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/block-legacy-authentication and then use a test user to test this CA policies.

 

But it could be that you have to wait for a couple of hours, until the policies are working. I had it in my case. Test it also on iOS and Android devices with their native mail apps and the Gmail app.

 

If you have any questions, let me know.

  • kazaki82's avatar
    kazaki82
    Copper Contributor
    Jul 28, 2021

    JeroenBurgerhout 

    dear all i m sorry to tell you that but you are all wrong about the Gmail mobile app 

    it is not using legacy it is using the browser as authentication 

    and some times using modern authentication 

    so the only way is to go to enterprise applications and block it 

     

     

Resources