Forum Discussion
Intune - iOS Mail Profile with Azure MFA
Having issues setting up a Device Configuration Profile with intune. I created a Profile to deploy a Mail Profile for iOS devices to connect to Office 365 mailbox. The profile deploys properly but when the profile deploys, I am asked to enter my credentials but they do not work.
The iOS Mail Profile is never able to verify the exchange account. After entering the password it says "Unable to verify account information".
We do have MFA enabled and our domain is federated with ADFS.
Does intune iOS Mail Profile configuration work with Azure MFA? What could possibly be the issue?
The native iOS mail app doesn't support MFA. You have to use app passwords for that app.
My advise because you are also using Office365 is, go for the Outlook for iOS app. Email account push is not needed for this app and this app supports MFA.
The Native iOS mail app actually does support MFA but not for deployment scenarios. That is not available in the current build of iOS. If I understand correctly, version 12 (in current Beta) does support MFA (oAuth/Modern authentication) I am not certain if it is in the current build and if intune will need to add additional code once iOS 12 is released. You will have to manually configure the native app or use Outlook for iOS with accounts that have MFA enabled.
I updated my phone to iOS 12 and attempted the Intune Company Portal deployment again, but it still does not seem to support MFA. Am I doing something wrong, or is an Intune Company Portal update required to support MFA? Has anyone gotten deployment of MFA accounts to work since iOS 12 was released?
Has anyone had any success with Office 365 MDM? I still have no way to "enable oauth within the intune mail profile" for this product, so all MFA/Modern Auth users' email profiles deployed to iOS through Office 365 MDM won't connect.
