02-15-2019 02:25 AM
02-15-2019 02:25 AM
My customer uses Intune for managing Windows devices and Airwatch for their iOS phones. He wants to allow access to O365 only from a corporate device.
Is there a way to make Intune aware that Airwatch devices are corporate devices?
02-15-2019 02:58 AM
No. You cant manage 1 device with 2 MDM solution. You can start using conditional access policy or MAM policy without Enrollment.
02-15-2019 03:09 AM
Hi and thank you for your reply,
I know you can't enroll a device to 2 different MDM solutions, and that is not what I am trying to do.
I don't want to enroll my iOS devices to Intune, I just want Intune to know that those devices are the only one authorized to access O365.
MAM policy is not an option as all personnal devices will be able to access O365.
02-15-2019 05:03 AM
you can't use Airwatch enrolled mobile devices (iOS/Android) with Conditional Access except for Windows 10 as device type. You can raise your request here on UserVoice. There are people already asking for this: https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/33713527-support-for-3rd...
02-15-2019 05:05 AMSolution
BTW, here is the official link to that:
You can configure conditional access policies that are device-based. The objective of a device-based conditional access policy is to only grant access to the selected cloud apps from managed devices. Requiring a device to be marked as compliant is one option you have to limit access to managed devices. A device can be marked as compliant by Intune (for any device OS) or by your third-party MDM system for Windows 10 devices. Third-party MDM systems for device OS types other than Windows 10 are not supported.
05-19-2019 07:48 PM
@Oliver Kieselbach Any updates to this thread? We have a similar scenario involving 20K AW-managed devices... End goal is to have Azure AD Conditional Access Policies recognize them as "managed"