SOLVED

To-do app Azure Conditional Access support

%3CLINGO-SUB%20id%3D%22lingo-sub-207608%22%20slang%3D%22en-US%22%3ETo-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-207608%22%20slang%3D%22en-US%22%3E%3CP%3EAnyone%20know%20if%20this%20is%20coming%20soon%3F%26nbsp%3B%20We%20can't%20use%20the%20mobile%20app%20since%20it%20doesn't%20support%20Conditional%20Access%20in%20Azure.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-321693%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321693%22%20slang%3D%22en-US%22%3E%3CP%3EAgreed%2C%20they%20hid%20the%20polices%2C%20yet%20had%20a%20page%20designed%20to%20show%20the%20classic%20polices.%20Why%20hide%20them%3F%20Makes%20NO%20sense%20and%20has%20taken%20hours%20of%20my%20life%20away%20trying%20to%20figure%20this%20out.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-321609%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321609%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20I%20was%20using%20the%20old%20CA%20rules%20that%20only%20allowed%20certain%20apps%20access%20Office%20365%20services.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20was%20really%20annoying%20was%20that%20Azure%20was%20telling%20me%20I%20still%20had%20Classic%20CA%20policies%20when%20I%20did%20a%20%22What%20if%22%20check%20but%20I%20couldn't%20find.%20I've%20no%20idea%20why%20they%20hid%20these%20policies.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-321607%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321607%22%20slang%3D%22en-US%22%3E%3CP%3EWell%20I%20only%20had%20three%20more%20engineers%20left%20to%20talk%20to%20then%20I%20guess!%20I%20was%20talking%20to%20%233%20and%20not%20getting%20any%20help.%20I%20even%20told%20them%20I%20suspected%20old%20CA%20rules%20were%20the%20root%20cause%20and%20got%20nothing.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20so%20much%20David!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20really%20needs%20to%20be%20on%20Microsoft's%20Intune%20documentation%20for%20early%20Intune%20adapters.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-321605%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321605%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F268624%22%20target%3D%22_blank%22%3E%40fgocinski%3C%2FA%3E%2C%20I%20had%20to%20go%20through%20a%20special%20link%20that%20an%20Azure%2FIntune%20support%20engineer%20provided.%20It%20took%20me%20about%20six%20different%20support%20people%20to%20find%20one%20who%20understood%20what%20I%20was%20talking%20about%20though!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20is%20the%20link%20they%20provided%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%3Fmicrosoft_aad_iam_classicPolicyDontHide%3Dtrue%23blade%2FMicrosoft_AAD_IAM%2FConditionalAccessBlade%2FClassicPolicies%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fportal.azure.com%2F%3Fmicrosoft_aad_iam_classicPolicyDontHide%3Dtrue%23blade%2FMicrosoft_AAD_IAM%2FConditionalAccessBlade%2FClassicPolicies%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20it%20helps.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-321601%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321601%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20were%20using%20the%20old%20CA%20polices%20as%20well%2C%20and%20this%20is%20what%20I%20suspected%20to%20be%20the%20issue%20because%20our%20CA%20rules%20were%20still%20working.%20Where%20did%20you%20end%20up%20finding%20these%20%22Classic%20Polices%22%3F%20Nothing%20is%20listed%20when%20I%20am%20under%20Azure%2C%20CA%2C%20then%20%22classic%20polices%22...%20Thank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-321474%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321474%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F268624%22%20target%3D%22_blank%22%3E%40fgocinski%3C%2FA%3E%2C%20yes%20I%20got%20this%20working.%20The%20problem%20for%20us%20was%20that%20were%20using%20old%20Conditional%20Access%20policies%20(Classic%20CA%20policies).%20These%20were%20hidden%20in%20our%20Azure%20portal.%20Once%20we%20were%20able%20to%20delete%20them%2C%20To_Do%20worked%20fine%20for%20us.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-321081%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321081%22%20slang%3D%22en-US%22%3E%3CP%3EHaving%20this%20same%20issue.%20Did%20you%20get%20it%20resolved%20yourself%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265656%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265656%22%20slang%3D%22en-US%22%3E%3CP%3ETHis%20is%20only%20working%20for%20us%20on%20the%20Insider%2Fbeta%20To%20Do%20app%20at%20the%20moment%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20our%20Conditional%20Access%20policy%20it%20is%20just%20set%20to%20%22require%20approved%20client%20app%22%20in%20the%20access%20controls%3C%2FP%3E%3CP%3EI%20also%20have%20To%20Do%20added%20as%20a%20Client%20app%20in%20the%20manage%2FApps%20blade%20but%20it%20isn't%20assigned%20to%20anyone%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20our%20Intune%20App%20Protection%20Policy%20Ihave%20added%20a%20custom%20app%20to%20the%20Targeted%20Apps%3C%2FP%3E%3CP%3EFor%20Android%20policy%3A%20com.microsoft.todos%3C%2FP%3E%3CP%3EFor%20iOS%20policy%3A%20com.microsoft.to-do%3C%2FP%3E%3CP%3EThe%20policy%20settings%20currently%20allow%20them%20to%20use%20any%20app%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265004%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265004%22%20slang%3D%22en-US%22%3E%3CP%3EInteresting.%20Is%20there%20anything%20in%20your%20Intune%2FConditional%20Access%20policies%20that%20references%20To-Do%20itself%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-264999%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-264999%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20is%20great%2C%20finally!%3C%2FP%3E%3CP%3EIt's%20working%20for%20me%20now%20on%20the%20Insider%20(beta)%20version%20of%20the%20Android%20To%20Do%20app%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-264849%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-264849%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20has%20been%20added%20to%20the%20list%20of%20%22Approved%20Apps%22%20on%20the%20web%20page%20here%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fazure%2Factive-directory%2Fconditional-access%2Ftechnical-reference%23approved-client-app-requirement%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fazure%2Factive-directory%2Fconditional-access%2Ftechnical-reference%23approved-client-app-requirement%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebut%20I%20get%20the%20following%20message%20when%20I%20try%20to%20login%3C%2FP%3E%3CP%3E%3CSPAN%3E%22Application%20used%20is%20not%20an%20approved%20application%20for%20conditional%20access.%20User%20needs%20to%20use%20one%20of%20the%20apps%20from%20the%20list%20of%20approved%20applications%20to%20use%20in%20order%20to%20get%20access.%22%3C%2FSPAN%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20the%20client%20need%20to%20be%20updated%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237896%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237896%22%20slang%3D%22en-US%22%3E%3CP%3ELooks%20like%20it%E2%80%99s%20coming%20very%20soon.%20%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2Fmicrosoft-brings-intune-support%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2Fmicrosoft-brings-intune-support%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-236786%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236786%22%20slang%3D%22en-US%22%3E%3CP%3EFYI%3A%20I%20followed%20the%20potential%20workaround%20steps%20but%20they%20didn't%20work.%3C%2FP%3E%3CP%3EI%20still%20get%20the%20%22you%20can't%20get%20there%20from%20here%22%20message%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-236755%22%20slang%3D%22en-US%22%3ERE%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236755%22%20slang%3D%22en-US%22%3EGood%20to%20see%20this%20at%20the%20top%20of%20the%20list.%20The%20whole%20reason%20I%20came%20to%20this%20board%20to%20ask%20this%20same%20question!%20Headed%20to%20uservoice%20now.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-236721%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236721%22%20slang%3D%22en-US%22%3EThis%20has%20been%20logged%20on%20user%20voice%20since%202017%20and%20has%20over%20300%20votes.%20Can%20we%20please%20get%20a%20better%20idea%20of%20how%20long%20this%20will%20take.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fmicrosoftintune.uservoice.com%2Fforums%2F291681-ideas%2Fsuggestions%2F31105642-support-to-do-app-for-mam-policies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmicrosoftintune.uservoice.com%2Fforums%2F291681-ideas%2Fsuggestions%2F31105642-support-to-do-app-for-mam-policies%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ESomeone%20in%20that%20thread%20mentions%20a%20workaround%2C%20can%20anyone%20confirm%20this%20works%20for%20them%3F%3CBR%20%2F%3E%231%20-%20add%20the%20app%20via%20Mobile%20apps%2C%20like%20you%20would%20any%20normal%20app%20store%20app%3CBR%20%2F%3E%232%20-%20whatever%20your%20normal%20iOS%20or%20Android%20base%20policy%2C%20Mobile%20Apps%20-%20App%20protection%20policies%2C%20Target%20Apps%2C%20click%20more%20apps%2C%20look%20at%20the%20bottom%20where%20you%20can%20add%20the%20package%20app%20(uri)%3CBR%20%2F%3E%232a%20for%20iOS%20add%20this%20package%20app%20(uri)%20com.microsoft.to-do%3CBR%20%2F%3E%232b%20for%20Android%20add%20this%20package%20app%20(uri)%20com.microsoft.todos%3CBR%20%2F%3E%233%20-%20save%20and%20test%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-220510%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-220510%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Joe%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThank%20You%20for%20your%20feedback%20and%20I%20will%20appreciate%20your%20patience%20.%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3ESure%20we%20will%20update%20the%20same%20thread%20when%20this%20feature%20is%20implemented%20.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%20Regards%3C%2FP%3E%0A%3CP%3EKiran%20Teja%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214853%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214853%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F155520%22%20target%3D%22_blank%22%3E%40Kiran%20Thalakokkula%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20could%20update%20this%20thread%20when%20this%20feature%20is%20added%20I%20would%20appreciate%20it!%26nbsp%3B%20Thanks%20again.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-207849%22%20slang%3D%22en-US%22%3ERe%3A%20To-do%20app%20Azure%20Conditional%20Access%20support%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-207849%22%20slang%3D%22en-US%22%3E%3CDIV%3E%26nbsp%3BHello%20Joe%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3EThank%20You%20so%20much%20for%20your%20valuable%20suggestion!%20User%20feedback%20and%20suggestions%20are%20really%20important%20to%20us%20as%20we%20work%20to%20improve%20Microsoft%20To-Do.%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3ECurrently%20we%20do%20not%20have%20support%20for%20conditional%20Access%20and%20Mobile%20Device%20Management%2C%20but%20we%20are%20actively%20working%20on%20adding%20this%20with%20one%20of%20our%20next%20versions%20of%20application%20updates.%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3EHowever%20you%20can%20use%20our%20public%20beta%20version%20if%20you%20are%20using%20android%20platform%20.%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3E%3CA%20href%3D%22https%3A%2F%2Fplay.google.com%2Fapps%2Ftesting%2Fcom.microsoft.todos%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fplay.google.com%2Fapps%2Ftesting%2Fcom.microsoft.todos%3C%2FA%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3EIn%20the%20meantime%2C%20we%20encourage%20all%20our%20users%20to%20post%20their%20ideas%20for%20future%20features%20and%20up-vote%20similar%20suggestions%20on%20%22Microsoft%20To-Do%20User%20Voice%22%26nbsp%3B%20-%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3E%3CA%20href%3D%22https%3A%2F%2Ftodo.uservoice.com%2Fforums%2F597175-feature-suggestions%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftodo.uservoice.com%2Fforums%2F597175-feature-suggestions%3C%2FA%3E%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3EWe%20base%20our%20choices%20for%20future%20features%20on%20what%20our%20users%20most%20request%2C%20so%20you%20should%20add%20your%20ideas%2C%20comments%2C%20and%20votes!%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3EThank%20you%20for%20your%20patience%20as%20we%20work%20on%20this%20and%20many%20other%20improvements%20to%20Microsoft%20To-Do!%20%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3EBest%20Regards%2C%3CBR%20%2F%3EKiran%20Teja%3C%2FDIV%3E%3C%2FLINGO-BODY%3E
Highlighted
Frequent Contributor

Anyone know if this is coming soon?  We can't use the mobile app since it doesn't support Conditional Access in Azure.

18 Replies
Highlighted
Solution
 Hello Joe
 
Thank You so much for your valuable suggestion! User feedback and suggestions are really important to us as we work to improve Microsoft To-Do.
 
Currently we do not have support for conditional Access and Mobile Device Management, but we are actively working on adding this with one of our next versions of application updates.
 
However you can use our public beta version if you are using android platform .
 
 
In the meantime, we encourage all our users to post their ideas for future features and up-vote similar suggestions on "Microsoft To-Do User Voice"  -
 
https://todo.uservoice.com/forums/597175-feature-suggestions
 
We base our choices for future features on what our users most request, so you should add your ideas, comments, and votes!
 
Thank you for your patience as we work on this and many other improvements to Microsoft To-Do!
 
Best Regards,
Kiran Teja
Highlighted

@Kiran Thalakokkula

 

If you could update this thread when this feature is added I would appreciate it!  Thanks again.

Highlighted

Hello Joe

 

Thank You for your feedback and I will appreciate your patience .


Sure we will update the same thread when this feature is implemented .

 

Best Regards

Kiran Teja

Highlighted
This has been logged on user voice since 2017 and has over 300 votes. Can we please get a better idea of how long this will take.

https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/31105642-support-to-do-app-for...

Someone in that thread mentions a workaround, can anyone confirm this works for them?
#1 - add the app via Mobile apps, like you would any normal app store app
#2 - whatever your normal iOS or Android base policy, Mobile Apps - App protection policies, Target Apps, click more apps, look at the bottom where you can add the package app (uri)
#2a for iOS add this package app (uri) com.microsoft.to-do
#2b for Android add this package app (uri) com.microsoft.todos
#3 - save and test
Highlighted
Good to see this at the top of the list. The whole reason I came to this board to ask this same question! Headed to uservoice now.
Highlighted

FYI: I followed the potential workaround steps but they didn't work.

I still get the "you can't get there from here" message

Highlighted
Highlighted

This has been added to the list of "Approved Apps" on the web page here https://docs.microsoft.com/en-gb/azure/active-directory/conditional-access/technical-reference#appro...

 

but I get the following message when I try to login

"Application used is not an approved application for conditional access. User needs to use one of the apps from the list of approved applications to use in order to get access." 

 

Does the client need to be updated?

Highlighted

This is great, finally!

It's working for me now on the Insider (beta) version of the Android To Do app

Highlighted

Interesting. Is there anything in your Intune/Conditional Access policies that references To-Do itself?

Highlighted

THis is only working for us on the Insider/beta To Do app at the moment

 

In our Conditional Access policy it is just set to "require approved client app" in the access controls

I also have To Do added as a Client app in the manage/Apps blade but it isn't assigned to anyone

 

In our Intune App Protection Policy Ihave added a custom app to the Targeted Apps

For Android policy: com.microsoft.todos

For iOS policy: com.microsoft.to-do

The policy settings currently allow them to use any app

 

 

Highlighted

Having this same issue. Did you get it resolved yourself?

Highlighted

Hi @fgocinski, yes I got this working. The problem for us was that were using old Conditional Access policies (Classic CA policies). These were hidden in our Azure portal. Once we were able to delete them, To_Do worked fine for us.

Highlighted

We were using the old CA polices as well, and this is what I suspected to be the issue because our CA rules were still working. Where did you end up finding these "Classic Polices"? Nothing is listed when I am under Azure, CA, then "classic polices"... Thank you!

Highlighted

Hi @fgocinski, I had to go through a special link that an Azure/Intune support engineer provided. It took me about six different support people to find one who understood what I was talking about though!

 

This is the link they provided 

 

https://portal.azure.com/?microsoft_aad_iam_classicPolicyDontHide=true#blade/Microsoft_AAD_IAM/Condi...

 

Hope it helps.

Highlighted

Well I only had three more engineers left to talk to then I guess! I was talking to #3 and not getting any help. I even told them I suspected old CA rules were the root cause and got nothing. 

 

Thank you so much David!

 

This really needs to be on Microsoft's Intune documentation for early Intune adapters.

Highlighted

Yes, I was using the old CA rules that only allowed certain apps access Office 365 services.

 

What was really annoying was that Azure was telling me I still had Classic CA policies when I did a "What if" check but I couldn't find. I've no idea why they hid these policies. 

Highlighted

Agreed, they hid the polices, yet had a page designed to show the classic polices. Why hide them? Makes NO sense and has taken hours of my life away trying to figure this out.