Forum Discussion
Conditional Access - Intune for Windows and Airwatch for iOS
Hi all,
My customer uses Intune for managing Windows devices and Airwatch for their iOS phones. He wants to allow access to O365 only from a corporate device.
Is there a way to make Intune aware that Airwatch devices are corporate devices?
BTW, here is the official link to that:
https://docs.microsoft.com/en-au/azure/active-directory/conditional-access/controls
You can configure conditional access policies that are device-based. The objective of a device-based conditional access policy is to only grant access to the selected cloud apps from managed devices. Requiring a device to be marked as compliant is one option you have to limit access to managed devices. A device can be marked as compliant by Intune (for any device OS) or by your third-party MDM system for Windows 10 devices. Third-party MDM systems for device OS types other than Windows 10 are not supported.
Hi,
No. You cant manage 1 device with 2 MDM solution. You can start using conditional access policy or MAM policy without Enrollment.
Hi and thank you for your reply,
I know you can't enroll a device to 2 different MDM solutions, and that is not what I am trying to do.
I don't want to enroll my iOS devices to Intune, I just want Intune to know that those devices are the only one authorized to access O365.
MAM policy is not an option as all personnal devices will be able to access O365.
Hi,
you can't use Airwatch enrolled mobile devices (iOS/Android) with Conditional Access except for Windows 10 as device type. You can raise your request here on UserVoice. There are people already asking for this: https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/33713527-support-for-3rd-party-emm-solutions-when-requiring
best,
Oliver
