Forum Discussion

James Sabia's avatar
James Sabia
Copper Contributor
Jun 23, 2018

Intune - iOS Mail Profile with Azure MFA

Having issues setting up a Device Configuration Profile with intune. I created a Profile to deploy a Mail Profile for iOS devices to connect to Office 365 mailbox. The profile deploys properly but wh...
Intune
MFA
Albert Neef's avatar
Albert Neef
Copper Contributor
Jun 25, 2018

The native iOS mail app doesn't support MFA. You have to use app passwords for that app. 

My advise because you are also using Office365 is, go for the Outlook for iOS app. Email account push is not needed for this app and this app supports MFA. 

 

Jeff Harlow's avatar
Jeff Harlow
Iron Contributor
Jun 25, 2018

The Native iOS mail app actually does support MFA but not for deployment scenarios.  That is not available in the current build of iOS. If I understand correctly, version 12 (in current Beta) does support MFA (oAuth/Modern authentication) I am not certain if it is in the current build and if intune will need to add additional code once iOS 12 is released.  You will have to manually configure the native app or use Outlook for iOS with accounts that have MFA enabled. 

  • Stephen Normandin's avatar
    Stephen Normandin
    Copper Contributor
    Sep 24, 2018

    I updated my phone to iOS 12 and attempted the Intune Company Portal deployment again, but it still does not seem to support MFA. Am I doing something wrong, or is an Intune Company Portal update required to support MFA? Has anyone gotten deployment of MFA accounts to work since iOS 12 was released?

    • Shane_Kolp's avatar
      Shane_Kolp
      Copper Contributor
      Jan 09, 2019

      I was able to get an in tune deployed iOS mail profile to successfully support Office 365 multi-factor authentication through the built in iOS mail app.  To do so, you must enable oauth within the intune mail profile. Previous commenters have mentioned iOS 12 as a requirement.  The above was tested and successful on iOS 12.1.1 and 12.1.2

      • snorma01's avatar
        snorma01
        Copper Contributor
        Jan 09, 2019

        Is there a way to enable oauth for Office 365 MDM? My deployment is configured through Office 365 MDM, and I don't see an option to enable oauth.

    • Robert Woods's avatar
      Robert Woods
      Steel Contributor
      Sep 26, 2018

      we tried applying Intune Company Portal deployment also Today after updating all IT dept phones to iOS 12. Can confirm it still does not work. We fell back to conditional access for mfa based on  Intune policy compliance instead, which is easier on the phone users anyways. 

      • Pasquale Perrotta's avatar
        Pasquale Perrotta
        Copper Contributor
        Oct 02, 2018
        Robert can provide more information on how you setup conditional access for mfa based on Intune policy compliance? We also had to fall back however our many of our intune clients are getting hung up and need to be re-enrolled.

        Thanks

Resources