Can you restrict authentication to an Azure Active user directory account based on a unique ID tied to a mobile device?

Question

Can we restrict authentication to an Azure Active user directory account based on a unique ID tied to a mobile device, such as a device id, serial number, or MAC address?

The goal would be to restrict authentication to an enterprise application (OIDC) to only approved devices.

Please advise.

Answer 1

@SwiftConnect

Thank you for posting your query on Microsoft Q&A, from above description I could understand that you want to block access to Azure application based upon MAC address of the devices.

Please do correct me if this is not the case by responding in the comments section.

Azure AD does not collect Mac ID, serial number or IMEI of the mobile device upon registration however it does assign a device ID when registered via company portal app (Microsoft Intune)

• Once registered a unique device ID is associated with each device.
• You can create a device group with those unique device ID

• You can create a block policy via conditional access.

Thanks,

Akshay Kaushik

Please "Accept the answer" (Yes), and share your feedback if the suggestion answers you’re your query. This will help us and others in the community as well.