Block 3rd party sign in on managed devices - iOS

Question

I have a bunch of Intune managed iOS devices that i'm trying to lock down. I want to stop anyone from signing in to any of the 365 apps on the device with a personal or work account (other than a single allowed one).

It seems that with Outlook it is configured, I can only add the principle named account that's tied to Intune, but with things like Office365, Word, Excel and Onedrive, I can sign in with a personal work account.

I have tried adding an app protection policy, with the xml data only allowing the principle name account to sign in, it doesn't seem to do anything in in the apps listed above.

Answer 1

@Matt Jones Thanks for posting in our Q&A.

For this issue, please understand that whether intune can do are based on if these apps provide such MDM feature. Currently, there is no method to make it via intune.

Thanks for your understanding.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.