SOLVED
Home

iOS App Protection Policy Outlook

%3CLINGO-SUB%20id%3D%22lingo-sub-290076%22%20slang%3D%22en-US%22%3EiOS%20App%20Protection%20Policy%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-290076%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20wanted%20to%20confirm%2C%20once%20you%20enable%20App%20Protection%20policies%20(MAM)%20on%20an%20iOS%20device%20and%20in%20particular%20the%20Outlook%20App%20configured%20with%20PIN...%20will%20you%20be%20prompted%20for%20a%20PIN%20when%20you%20attempt%20to%20access%20any%20mailboxes%20within%20the%20app%3F%20So%20if%20I%20have%20multiple%20emails%20assigned%20within%20Outlook%2C%20several%20personal%20ones%20and%20one%20corporate%20mailbox%2C%20it%20appears%20that%20I%20will%20need%20to%20supply%20a%20PIN%20to%26nbsp%3Baccess%20any%20mailbox%20-%20including%20providing%20a%20PIN%20for%20the%20personal%20accounts.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20true%20for%20everyone%3F%20Any%20replies%20would%20be%20much%20appreciated%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-290076%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-298203%22%20slang%3D%22en-US%22%3ERe%3A%20iOS%20App%20Protection%20Policy%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-298203%22%20slang%3D%22en-US%22%3E%3CP%3EYes%20it's%20most%20of%20the%20time%20an%20app%20PIN.%20As%20soon%20as%20someone%20tries%20to%20open%20the%20app%20the%20PIN%20is%20needed.%3C%2FP%3E%0A%3CP%3EIn%20case%20of%20Outlook%20mobile%20there%20is%20currently%20no%20distinction%20between%20underlying%20email%20accounts.%20It%20protects%20the%20app%20itself.%20This%20is%20the%20standard%20behavior%2C%20but%20as%20soon%20as%20an%20app%20is%20multi-identity%20capable%20it%20is%20up%20to%20the%20developer%20how%20they%20are%20going%20to%20handle%20this.%20It%20is%20possible%20to%20prompt%20only%20in%20a%20scenario%20where%20you%20access%20the%20corporate%20data%2C%20but%20again%20this%20is%20implementation%20specific%20and%20up%20to%20the%20developer.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHere%20a%20little%20more%20detail%20on%20this%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fmam-faq%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fmam-faq%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%20class%3D%22%22%3EWhat%20is%20the%20Intune%20app%20PIN%3F%3C%2FSTRONG%3E%3CBR%20%2F%3EThe%20Personal%20Identification%20Number%20(PIN)%20is%20a%20passcode%20used%20to%20verify%20that%20the%20correct%20user%20is%20accessing%20the%20organization's%20data%20in%20an%20application.%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CP%3E%3CSTRONG%20class%3D%22%22%3EWhen%20is%20the%20user%20prompted%20to%20enter%20their%20PIN%3F%3C%2FSTRONG%3E%3CBR%20%2F%3EIntune%20prompts%20for%20the%20user's%20app%20PIN%20when%20the%20user%20is%20about%20to%20access%20%22corporate%22%20data.%20In%20multi-identity%20apps%20such%20as%20Word%2FExcel%2FPowerPoint%2C%20the%20user%20is%20prompted%20for%20their%20PIN%20when%20they%20try%20to%20open%20a%20%22corporate%22%20document%20or%20file.%20In%20single-identity%20apps%2C%20such%20as%20line-of-business%20apps%20managed%20using%20the%20Intune%20App%20Wrapping%20Tool%2C%20the%20PIN%20is%20prompted%20at%20launch%2C%20because%20the%20Intune%20App%20SDK%20knows%20the%20user's%20experience%20in%20the%20app%20is%20always%20%22corporate.%22%3C%2FP%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-290272%22%20slang%3D%22en-US%22%3ERe%3A%20iOS%20App%20Protection%20Policy%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-290272%22%20slang%3D%22en-US%22%3E%3CP%3EBased%20on%20my%20tests%2C%20yes.%20you%20have%20to%20enter%20PIN%20for%20app%20itself.%20even%20if%20you%20have%20few%20accounts%20in%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Baljit Aujla
Occasional Contributor

Hi All,

 

Just wanted to confirm, once you enable App Protection policies (MAM) on an iOS device and in particular the Outlook App configured with PIN... will you be prompted for a PIN when you attempt to access any mailboxes within the app? So if I have multiple emails assigned within Outlook, several personal ones and one corporate mailbox, it appears that I will need to supply a PIN to access any mailbox - including providing a PIN for the personal accounts.

 

Is this true for everyone? Any replies would be much appreciated :)

2 Replies

Based on my tests, yes. you have to enter PIN for app itself. even if you have few accounts in it.

Solution

Yes it's most of the time an app PIN. As soon as someone tries to open the app the PIN is needed.

In case of Outlook mobile there is currently no distinction between underlying email accounts. It protects the app itself. This is the standard behavior, but as soon as an app is multi-identity capable it is up to the developer how they are going to handle this. It is possible to prompt only in a scenario where you access the corporate data, but again this is implementation specific and up to the developer. 

 

Here a little more detail on this: https://docs.microsoft.com/en-us/intune/mam-faq

 

What is the Intune app PIN?
The Personal Identification Number (PIN) is a passcode used to verify that the correct user is accessing the organization's data in an application.

  • When is the user prompted to enter their PIN?
    Intune prompts for the user's app PIN when the user is about to access "corporate" data. In multi-identity apps such as Word/Excel/PowerPoint, the user is prompted for their PIN when they try to open a "corporate" document or file. In single-identity apps, such as line-of-business apps managed using the Intune App Wrapping Tool, the PIN is prompted at launch, because the Intune App SDK knows the user's experience in the app is always "corporate."

 

best,

Oliver

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
ChirmyRam in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies