Forum Discussion

Vineet Arora's avatar
Vineet Arora
Brass Contributor
Oct 06, 2017
Solved

Condition Access Question

Hi,   We have following business requirement. Only the devices issued/approved by IT departmernt should be able to access SharePoint Online. How can we acheive this using conditional or compliance...
Conditional Access
Intune
  • Christopher DelaTorre's avatar
    Christopher DelaTorre
    Nov 01, 2017

    Hi,
    The following article should help you set this up.

     

    https://cloudblogs.microsoft.com/enterprisemobility/2017/03/09/conditional-access-limited-access-policies-for-sharepoint-are-in-public-preview/

     

    https://support.office.com/en-us/article/Control-access-from-unmanaged-devices-5ae550c4-bd20-4257-847b-5c20fb053622?ui=en-US&rs=en-US&ad=US

     

    Also, in order for 'Use App enforce restriction' session access control to work. You have to set your organization to 'First-Release' for everyone. This will then update the sharepoint admin center access control page to set controls for sharepoint online access.

     

    Hope this helps!

Deleted's avatar
Deleted
Oct 10, 2017

Hey Vineet,

 

I am aware of the following solution, there could be other options;

 

To find out if a device is issued by the org/is compliant you would need a MDM solution like Intunes to find this information.

 

Once this is done you could leverage the azure ad conditional access policies to regulate the access.