%3CLINGO-SUB%20id%3D%22lingo-sub-2100061%22%20slang%3D%22en-US%22%3ESupport%20Tip%3A%20How%20to%20enable%20Intune%20app%20protection%20policies%20(APP)%20with%20Microsoft%20Lists%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2100061%22%20slang%3D%22en-US%22%3E%3CP%3ESeveral%20of%20our%20customers%20want%20to%20manage%20the%20new%20Microsoft%20Lists%20mobile%20app%20for%20iOS.%20This%20mobile%20app%20helps%20you%20track%20information%20and%20organize%20your%20work%3B%20for%20more%20information%2C%20see%20the%20TechCommunity%20announcement%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-365-blog%2Fget-the-microsoft-lists-app-for-ios%2Fba-p%2F2072844%22%20target%3D%22_blank%22%3EGet%20the%20Microsoft%20Lists%20app%20for%20iOS%20(Microsoft%20365%20Blog)%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20Microsoft%20Lists%20app%20for%20iOS%20is%20available%20in%20the%20%3CA%20href%3D%22https%3A%2F%2Fapps.apple.com%2Fus%2Fapp%2Fmicrosoft-lists%2Fid1530637363%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EApple%20App%20Store%3C%2FA%3E.%20You%20may%20have%20noticed%20that%20the%20Lists%20app%20is%20not%20listed%20as%20a%20targetable%20app%20for%20iOS%20app%20protection%20policies%20in%20our%20admin%20center%20today.%20Our%20goal%20is%20to%20make%20it%20available%20for%20all%20customers%20to%20target%20within%20the%20coming%20months.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EEven%20though%20it%E2%80%99s%20not%20configurable%20as%20a%20first%20party%20app%20in%20the%20admin%20center%2C%20note%20that%20Microsoft%20Lists%20mobile%20app%20supports%20Intune%20app%20protection%20policies%20today.%20We%20recommend%20that%20you%20target%20the%20app%20to%20ensure%20the%20data%20being%20accessed%20is%20protected%20by%20app%20protection%20policies.%20You%20can%20target%20the%20Lists%20app%20with%20app%20protection%20policies%20under%20custom%20apps%20by%20entering%20the%20Bundle%20ID%3A%26nbsp%3B%3CSTRONG%3Ecom.microsoft.splists%3C%2FSTRONG%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EFor%20more%20details%20on%20how%20to%20target%20apps%20with%20your%20app%20protection%20policy%2C%20see%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fmem%2Fintune%2Fapps%2Fapp-protection-policies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EHow%20to%20create%20and%20assign%20app%20protection%20policies%3C%2FA%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3ELet%20us%20know%20if%20you%20have%20any%20additional%20questions%20on%20this%20by%20commenting%20to%20this%20post%20below%2C%20or%20tagging%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FIntuneSuppTeam%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%40IntuneSuppTeam%3C%2FA%3E%20out%20on%20Twitter.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2100061%22%20slang%3D%22en-US%22%3E%3CP%3ERead%20this%20post%20if%20you%20are%20using%20the%20new%20Microsoft%20Lists%20mobile%20app%20for%20iOS%20and%20also%20want%20to%20enable%20Intune%20app%20protection%20policies.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2100061%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EiOS%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ELists%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMEM%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESupport%20Tip%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2102398%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20How%20to%20enable%20Intune%20app%20protection%20policies%20(APP)%20with%20Microsoft%20Lists%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2102398%22%20slang%3D%22en-US%22%3E%3CP%3EI%20added%20the%20com.microsoft.splists%20bundle%20ID%20to%20my%20App%20Protection%20Policy%20(for%20iOS)%20last%20night%2C%20right%20after%20reading%20this.%20As%20of%20this%20morning%2C%20~12%20hours%20later%2C%20it's%20still%20not%20working.%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20me%2C%20the%20Lists%20app%20just%20prompts%20for%20username.%20I%20provide%20my%20UPN%2C%20and%20immediately%20it%20switches%20over%20to%20the%20Microsoft%20Authenticator%20app...%20this%20is%20the%20one%20that%20tells%20me%20this%20isn't%20allowed%20here.%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22lists-authenticator-fail.jpg%22%20style%3D%22width%3A%20286px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F249850iBF0FA7B388E7DE5B%2Fimage-dimensions%2F286x619%3Fv%3D1.0%22%20width%3D%22286%22%20height%3D%22619%22%20role%3D%22button%22%20title%3D%22lists-authenticator-fail.jpg%22%20alt%3D%22lists-authenticator-fail.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20it%20possible%20that%20the%20Authenticator%20app%20Bundle%20ID%20needs%20to%20be%20added%20too%3F%20Or%20some%20other%20reason%20why%20this%20is%20happening%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20also%20checked%20App%20%5C%20Monitor%20at%20endpoint.microsoft.com%20and%20see%20that%20the%20bundle%20ID%20is%20in%20there%2C%20but%20hasn't%20checked%20in.%26nbsp%3B%20While%20not%20shown%20in%20the%20screenshot%2C%20I%20do%20have%204-5%20other%20trusted%20Microsoft%20apps%20that%20have%20all%20checked%20in%2Fsynced%20since%20this%2C%20within%20the%20last%2030%20minutes%20even%2C%20but%20still%20the%20Lists%20app%20not%20so%20much.%20Is%20there%20a%20way%20to%20force%20this%20APP%20Sync%20process%20or%20these%20apps%3F%20I%20reinstalled%20Lists%20and%20that%20didn't%20help.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20game%20for%20anything%2C%20please%20let%20me%20know%20where%20else%20I%20should%20look%20or%20what%20I%20should%20try.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22lists-notcheckedin-APP-monitor.jpg%22%20style%3D%22width%3A%20569px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F249851iB1C6DFC4DBE60F8E%2Fimage-dimensions%2F569x265%3Fv%3D1.0%22%20width%3D%22569%22%20height%3D%22265%22%20role%3D%22button%22%20title%3D%22lists-notcheckedin-APP-monitor.jpg%22%20alt%3D%22lists-notcheckedin-APP-monitor.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3EAfter%20this%20I%20checked%20in%20at%20Azure%20AD%20and%20reviewed%20my%20sign-in%20logs%2C%20specific%20to%20Conditional%20Access%20-%20we%20have%20a%20policy%20that%20applies%20to%20all%20O365%20apps%20(AAD%20%22enterprise%20apps%22)%20such%20as%20sharepoint%20online%2C%20exchange%20online%2C%20and%20all%20related%20services%20including%20Lists%20and%20Planner%20etc.%26nbsp%3B%20This%20policy%2C%20for%20mobile%20OSes%2C%20requires%20Microsoft%20trusted%20apps.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20grant%20controls%20are%20configured%20for%20this%20CA%20policy%20to%20require%20approved%20client%20apps%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsupportedmamapps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2Fsupportedmamapps%3C%2FA%3E%26nbsp%3B%20-OR-%20require%20app%20protection%20policies%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsupportedmampolicyapps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2Fsupportedmampolicyapps%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2102404%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20How%20to%20enable%20Intune%20app%20protection%20policies%20(APP)%20with%20Microsoft%20Lists%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2102404%22%20slang%3D%22en-US%22%3E%3CP%3EHere's%20that%20screenshot%20for%20the%20Grant%20Controls%2C%20fyi%3C%2FP%3E%3CP%3ELet%20me%20know%20if%20I%20should%20open%20a%20case%20on%20this%2C%20or%20feel%20free%20to%20respond%20with%20ideas%20here%20as%20well.%20Thanks!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22lists-CA-policy-grant-controls.jpg%22%20style%3D%22width%3A%20257px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F249853iA47195EF5ABF813F%2Fimage-dimensions%2F257x461%3Fv%3D1.0%22%20width%3D%22257%22%20height%3D%22461%22%20role%3D%22button%22%20title%3D%22lists-CA-policy-grant-controls.jpg%22%20alt%3D%22lists-CA-policy-grant-controls.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E

Several of our customers want to manage the new Microsoft Lists mobile app for iOS. This mobile app helps you track information and organize your work; for more information, see the TechCommunity announcement: Get the Microsoft Lists app for iOS (Microsoft 365 Blog).

 

The Microsoft Lists app for iOS is available in the Apple App Store. You may have noticed that the Lists app is not listed as a targetable app for iOS app protection policies in our admin center today. Our goal is to make it available for all customers to target within the coming months. The Lists app will be available to target as a first party app coming in the 2103 service release.

 

Even though it’s not configurable as a first party app in the admin center, note that Microsoft Lists mobile app supports Intune app protection policies today. We recommend that you target the app to ensure the data being accessed is protected by app protection policies. You can target the Lists app with app protection policies under custom apps by entering the Bundle ID: com.microsoft.splists.

 

For more details on how to target apps with your app protection policy, see: How to create and assign app protection policies.

 

Let us know if you have any additional questions on this by commenting to this post below, or tagging @IntuneSuppTeam out on Twitter.

 

Blog post updates

  • 2/10: The Lists app will be available to target as a first party app coming in the 2103 service release!
6 Comments
Frequent Contributor

I added the com.microsoft.splists bundle ID to my App Protection Policy (for iOS) last night, right after reading this. As of this morning, ~12 hours later, it's still not working. 

For me, the Lists app just prompts for username. I provide my UPN, and immediately it switches over to the Microsoft Authenticator app... this is the one that tells me this isn't allowed here. 

lists-authenticator-fail.jpg

 

Is it possible that the Authenticator app Bundle ID needs to be added too? Or some other reason why this is happening? 

 

I also checked App \ Monitor at endpoint.microsoft.com and see that the bundle ID is in there, but hasn't checked in.  While not shown in the screenshot, I do have 4-5 other trusted Microsoft apps that have all checked in/synced since this, within the last 30 minutes even, but still the Lists app not so much. Is there a way to force this APP Sync process or these apps? I reinstalled Lists and that didn't help. 

 

I'm game for anything, please let me know where else I should look or what I should try. 

 

lists-notcheckedin-APP-monitor.jpg

 
 
 

After this I checked in at Azure AD and reviewed my sign-in logs, specific to Conditional Access - we have a policy that applies to all O365 apps (AAD "enterprise apps") such as sharepoint online, exchange online, and all related services including Lists and Planner etc.  This policy, for mobile OSes, requires Microsoft trusted apps. 

 

The grant controls are configured for this CA policy to require approved client apps https://aka.ms/supportedmamapps  -OR- require app protection policies https://aka.ms/supportedmampolicyapps 

 

Frequent Contributor

Here's that screenshot for the Grant Controls, fyi

Let me know if I should open a case on this, or feel free to respond with ideas here as well. Thanks!

 

lists-CA-policy-grant-controls.jpg

Hi @Chris Smith, thanks for the feedback. The Microsoft Lists app needs to support the Conditional Access grant "Require app protection policies" to leverage that specific grant control. We've reached out to the Conditional Access team, but no dates to share yet. Stay tuned to this post for future updates regarding APP and Conditional Access support.

Senior Member

I am having the same experience. It does not seem that the List app was added as a required app.

The issue seems to be related to Conditional Access and most likely the Lists app is not added to the Microsoft "whitelist" of approved apps. So as long as you have a CA rule to require approved client apps, you can not use Lists. App protection will most likely work if you do not have this Conditional Access requirement. I hope Intune adds Lists application to the approved list soon as I am not going to open up Sharepoint to any 3rd party apps anytime soon. 

 

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-acces...

 

 

Regular Visitor

Greetings,  I would like to know information about approved apps for Conditional access like  @Jan Ketil Skanke post. 

Our company is evaluating MS lists and would like to provide it to our users to access on Mobile devices.  We currently have a condition set to only grant access to approved client apps in our Conditional Access policies.  Microsoft lists is currently not in that list of approved apps.  Is there an timeline on when it might become available as an approved app for Conditional Access, and is there a process to get into a preview ring for this? 

 

Thank you in Advanced.

Clint