Home
%3CLINGO-SUB%20id%3D%22lingo-sub-841960%22%20slang%3D%22en-US%22%3ESupport%20Tip%3A%20Block%20document%20saving%20from%20the%20iOS%20Adobe%20Reader%20mobile%20app%20to%20the%20Adobe%20Document%20Cloud%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-841960%22%20slang%3D%22en-US%22%3E%3CDIV%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EThe%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fapps-supported-intune-apps%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EAdobe%20Acrobat%20reader%20mobile%20app%20supports%3C%2FA%3EIntune%20app%20protection%20policies%20as%20of%20August%202019%20on%20both%20Android%20and%20iOS.%20On%20iOS%2C%20there%20is%20a%20known%20issue%20with%20the%20'Save%20Copies%20of%20Org%20Data'%20setting%20targeted%20to%20the%20Adobe%20Acrobat%20reader%20app.%20%3C%2FFONT%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EToday%2C%20when%20this%20setting%20is%20configured%2C%20it%20does%20not%20block%20saving%20copies%20of%20PDF%20files%20from%20the%20Adobe%20Acrobat%20mobile%20app%20to%20the%20Adobe%20Document%20Cloud.%20%3C%2FFONT%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EIf%20your%20organization%20wants%20to%20block%20this%20behavior%2C%20Adobe%20Acrobat%20on%20iOS%20currently%20enables%20an%20app%20config%20key%2Fvalue%20to%20block%20this.%20You%20can%20adjust%20the%20key%2Fvalue%20for%20both%20MDM%20(managed%20device)%20and%20non-MDM%20(managed%20app)%20channels%20in%20Intune%20by%20following%20the%20instructions%20in%20the%20documentation%20linked%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fapp-configuration-policies-overview%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E(MDM)%20or%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fapp-configuration-policies-managed-app%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E(APP).%20The%20key%20is%20'allowDocumentCloudFSAndServicesAccess'%20and%20the%20value%20should%20be%20set%20to%20'false'.%20This%20removes%20the%20option%20given%20to%20the%20end%20user%20to%20'Save%20to%20Adobe%20Document%20Cloud'%20within%20their%20Adobe%20app.%20This%20key%20and%20value%20should%20be%20delivered%20through%20Intune%20app%20config%20policies.%20%3C%2FFONT%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EWe%20are%20working%20with%20the%20Adobe%20Acrobat%20app%20development%20team%20to%20behave%20like%20other%20Intune%20SDK-integrated%20apps%2C%20and%20support%20the%20'Save%20Copies%20of%20Org%20Data'%20setting%20in%20the%20same%20way.%20We%20will%20update%20this%20blog%20post%20when%20we%20have%20additional%20information.%26nbsp%3B%3CBR%20%2F%3E%3C%2FFONT%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-841960%22%20slang%3D%22en-US%22%3E%3CP%3ERead%20this%20support%20tip%20for%20more%20information%20on%20how%20to%20block%20saving%20a%20doc%20from%20the%20iOS%20Adobe%20Reader%20mobile%20app%20to%20the%20Adobe%20document%20cloud.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-841960%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eknown%20issue%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESupport%20Tip%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-878707%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Block%20document%20saving%20from%20the%20iOS%20Adobe%20Reader%20mobile%20app%20to%20the%20Adobe%20Document%20Cl%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-878707%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Intune%20Support%20Team%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ecurrently%2C%20our%20Conditional%20Access%20policy%20does%20not%20work%20for%26nbsp%3BiOS%20Adobe%20Reader%20mobile%20app.%20After%20sign-in%20with%20Adobe%20Enterprise%20ID%2C%20the%20app%20is%20not%20able%20to%20send%20Device%20Registration%20information%20back%20to%20AAD%20so%20the%20login%20fails%20with%20Adobe%20Creative%20Cloud.%3C%2FP%3E%3CP%3EAny%20plan%2C%20when%20this%20issue%20will%20be%20fixed%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-894307%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Block%20document%20saving%20from%20the%20iOS%20Adobe%20Reader%20mobile%20app%20to%20the%20Adobe%20Document%20Cl%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-894307%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20posting%20this.%26nbsp%3B%20I%20just%20added%20Acrobat%20to%20our%20available%20apps%20and%20noticed%20this%20problem%20and%20was%20pleasantly%20surprised%20to%20find%20a%20solution!%3C%2FP%3E%3C%2FLINGO-BODY%3E
The Adobe Acrobat reader mobile app supports Intune app protection policies as of August 2019 on both Android and iOS. On iOS, there is a known issue with the 'Save Copies of Org Data' setting targeted to the Adobe Acrobat reader app. Today, when this setting is configured, it does not block saving copies of PDF files from the Adobe Acrobat mobile app to the Adobe Document Cloud.
 
If your organization wants to block this behavior, Adobe Acrobat on iOS currently enables an app config key/value to block this. You can adjust the key/value for both MDM (managed device) and non-MDM (managed app) channels in Intune by following the instructions in the documentation linked here (MDM) or here (APP). The key is 'allowDocumentCloudFSAndServicesAccess' and the value should be set to 'false'. This removes the option given to the end user to 'Save to Adobe Document Cloud' within their Adobe app. This key and value should be delivered through Intune app config policies.
 
We are working with the Adobe Acrobat app development team to behave like other Intune SDK-integrated apps, and support the 'Save Copies of Org Data' setting in the same way. We will update this blog post when we have additional information. 
2 Comments
Senior Member

Hi Intune Support Team,

 

currently, our Conditional Access policy does not work for iOS Adobe Reader mobile app. After sign-in with Adobe Enterprise ID, the app is not able to send Device Registration information back to AAD so the login fails with Adobe Creative Cloud.

Any plan, when this issue will be fixed?

Regular Visitor

Thanks for posting this.  I just added Acrobat to our available apps and noticed this problem and was pleasantly surprised to find a solution!