Share via

What is the type of auth Outlook for ios & android uses?

Sabarivasan N 31 Reputation points
2021-11-16T12:03:59.473+00:00

What is the type of auth Outlook for ios & android uses? Activesync or Modern Auth. How can we block basic auth and force outlook for ios & android to log with modern auth?

We have a Mobile device access policy on exchange online that quarantines devices using Activesync, access is denied. A conditional access policy that we have in Azure overrides it and allows to auth outlook ios & android with activesync. CA policy details

  • Cloud apps - Exchange Online
  • Platform - ios & android
  • Client apps - Mobile apps & desktop clients
  • Access control - grant access - require approved client app

Accounts are assigned with an EMS license. When I remove a user from the above CA policy, they lose access to emails on Outlook ios/android and receive an error, access is denied for ActiveSync.

I wanted to make sure all M365 apps including Outlook ios & android are auth through Modern auth and if can remove the above CA policy. Any information is helpful, thank you

Exchange Online
Exchange Online
A Microsoft email and calendaring hosted service.
6,178 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Intune | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Mr Sb 371 Reputation points
    2021-12-07T16:26:38.68+00:00

    By default, the Outlook app on both platforms uses modern authentication. To make sure users will stop using basic auth I suggest to do the following:

    1. Identify which users are still using ActiveSync.
    2. Inform users to reconfigure their account with modern authentication.
    3. Only allow modern auth in the conditional access policy.
    4. Make sure users are included in the CA policy.

    Best practice is to use CA policies to control authentication for the user. I would try to get rid of the Exchange policy and control all policies with conditional access if your users are licensed for it ofcourse.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.