Conditional access for iOS

Question

Conditional access for iOS

tarou chabi 731

Can conditional access block access to o365 from devices that don't have a digital certificate installed?

Lu Dai-MSFT 28,536 Reputation points

2021-04-08T01:49:05.447+00:00

@tarou chabi This issue is more related to Azure AD. To get more accurate help, I will remove the intune tag. Thanks.

1 answer

Your answer

Lu Dai-MSFT 28,536 Reputation points

2021-04-08T01:49:05.447+00:00

@tarou chabi This issue is more related to Azure AD. To get more accurate help, I will remove the intune tag. Thanks.

Answer 1

Jason Sandys 31,421 Microsoft Employee Moderator

Technically, yes as CA simply blocks non-compliant devices. Compliance can be defined in many different ways but there is no built-in rule in AD or Intune to check for the presence of a cert.

What's the use case here where a cert would be required for a compliant device? How does this cert get onto the devices and what is it used for? Are these fully managed devices or is this a MAM scenario?

tarou chabi 731 Reputation points

2021-04-08T15:18:33.54+00:00

Teach me Please.Why are SCEP and PKCS available?
I'm not sure in what cases these certificates need to be configured.
Jason Sandys 31,421 Reputation points Microsoft Employee Moderator

2021-04-08T16:03:36.947+00:00

Sorry, not following. Is there a scenario here you are having issues with or not?
tarou chabi 731 Reputation points

2021-04-10T04:45:30.377+00:00

really? I just want to deny access from the device with the digital certificate installed.
The services I can think of right now are MCAS and conditional access.
It doesn't seem to be possible with intune and conditional access alone. But, I plan to buy EMS E3.
So I'm asking if there is any good way by Azure AD function.
Jason Sandys 31,421 Reputation points Microsoft Employee Moderator

2021-04-11T04:40:10.073+00:00

What's the scenario here? How do these devices get their certificates?
tarou chabi 731 Reputation points

2021-04-23T00:37:14.033+00:00

I just wanted to quarantine access from devices from group companies and partner companies.
Because you can't manage guests with intune. And multi-factor authentication cannot be used because it is required multiple times.
Now, I think that all I can do is apply the AIP to the document.
Please let me know if you have any good ideas.

Share via

Conditional access for iOS

1 answer

Your answer