SOLVED
Home

iOS mail app needs consent since iOS 11

%3CLINGO-SUB%20id%3D%22lingo-sub-132372%22%20slang%3D%22en-US%22%3EiOS%20mail%20app%20needs%20consent%20since%20iOS%2011%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-132372%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20noticed%20that%20auto-configuring%20the%20iOS%20mail%20app%20needs%20user%20consent%20in%20recent%20iOS%20versions.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20353px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F24869iBE02BCFF57A28A74%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Consent.PNG%22%20title%3D%22Consent.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EThe%20instructions%20are%20also%20updated%20by%20MS%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FSet-up-email-using-the-iOS-Mail-app-7e5b180f-bc8f-45cc-8da1-5cefc1e633d1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FSet-up-email-using-the-iOS-Mail-app-7e5b180f-bc8f-45cc-8da1-5cefc1e633d1%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EThe%20problem%20is%20we%20disabled%20the%20feature%20that%20users%20can%20consent%20to%203rd%20party%20apps%3C%2FP%3E%0A%3CP%3EUsersPermissionToUserConsentToAppEnabled%20%3A%20False%3C%2FP%3E%0A%3CP%3EI%20managed%20to%20give%20admin%20consent%20for%20iOS%20Accounts%2C%20so%20problem%20solved%20until%20the%20client-id%20changes.%26nbsp%3BI%20couldn't%20find%20much%20info%20on%20this%20issue%20and%20also%20MS%20support%20couldn't%20help.%20Is%20it%20so%20special%20that%20we%20disabled%20user%20consent%20in%20our%20tenant%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-132372%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EiOS%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-132757%22%20slang%3D%22en-US%22%3ERe%3A%20iOS%20mail%20app%20needs%20consent%20since%20iOS%2011%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-132757%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20your%20response%2C%20it's%20getting%20more%20clear%20to%20me.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-132390%22%20slang%3D%22en-US%22%3ERe%3A%20iOS%20mail%20app%20needs%20consent%20since%20iOS%2011%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-132390%22%20slang%3D%22en-US%22%3E%3CP%3EThere%20is%20no%20issue%20here%2C%20the%20folks%20at%20Apple%20simply%20updated%20the%20app%20to%20use%20Modern%20authentication%2C%20finally.%20It's%20actually%20a%20good%20thing%20as%20it%20means%20you%20can%20have%20%22native%22%20MFA%20experience%20and%20so%20on.%20The%20consent%20is%20also%20part%20of%20this%2C%20and%20you%20already%20know%20how%20to%20control%20it%2C%20which%20is%20another%20good%20thing%20-%20you%20have%20a%20better%20understanding%20which%20users%20are%20using%20which%20apps%2C%20etc.%20You%20are%20certainly%20not%20the%20first%20organization%20to%20disable%20that%20option%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Ruth de Groot
Occasional Contributor

We noticed that auto-configuring the iOS mail app needs user consent in recent iOS versions. 

Consent.PNG

The instructions are also updated by MS https://support.office.com/en-us/article/Set-up-email-using-the-iOS-Mail-app-7e5b180f-bc8f-45cc-8da1...

The problem is we disabled the feature that users can consent to 3rd party apps

UsersPermissionToUserConsentToAppEnabled : False

I managed to give admin consent for iOS Accounts, so problem solved until the client-id changes. I couldn't find much info on this issue and also MS support couldn't help. Is it so special that we disabled user consent in our tenant? 

2 Replies
Solution

There is no issue here, the folks at Apple simply updated the app to use Modern authentication, finally. It's actually a good thing as it means you can have "native" MFA experience and so on. The consent is also part of this, and you already know how to control it, which is another good thing - you have a better understanding which users are using which apps, etc. You are certainly not the first organization to disable that option :)

Thank you for your response, it's getting more clear to me.

Related Conversations