Device limits with MAM / APP

[Deleted]

Is there a way to limit the number of devices a user signs into apps protected by app protection policies? We happen to be enforcing MFA in our policies so the devices are appearing in AAD as registered devices.

There are device limits for enrolled devices but enrollment means MDM and we are trying to be as light touch as possible.

The other option appears to be device limits in Azure but I assume that just means all devices including Windows etc and it only allows a figure in increments of 5....

[#2]

Hi

It's not limit the amount of MAM devices as far as I know. You can only limit the amount of MDM enrollments, but that's a shared counter for all platforms.

Why are you trying to limit the amount of devices a user uses? I wouldn't worry about it too much, there is no downside for having a lot of devices.

[#3]

I think it is in terms of a reduced attack surface if a user has many devices which could be compromised. I've just been asked if we can do it so am looking into the options.

[#4]

One option might be to require a PIN code before accessing the container?

[#5]

@Deleted There is no such limit for MAM aka azure AD registered devices however for MAM ,you can have app protection policies to secure the data with PIN and store the data only on cloud (onedrive/sharepoint) and lock the app every 5 min of inactivity etc .