enable Adobe to read PDF from One drive on ios/Android

Question

enable Adobe to read PDF from One drive on ios/Android

svjs-0437 201

We are deploying adobe reader for iOS& Android from Intune. Howevr when user tries to read PDF file in their OneDrive using adobe reader it says 'You can't thereaccess from here. It looks like you're trying to open this resource with an application which has not been approved by our IT department. Ask them for a list of apps approved.'

We also have a conditional access 'policy for required app' in iOS & Android which i am assuming is causing this trouble. Is there a way to include adobe to the approved list of something like that to allow adobe to access content from Onedrive?

I also found this link, but not sure how to execute this, can somebody guide me on this.

https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-connecting-adobe-and-onedrive-for-business/ba-p/2197586

1 answer

Your answer

Answer 1

Crystal-MSFT 53,991 Microsoft External Staff

@svjs-0437 , For the article you provided, it mentioned the new Adobe Acrobat application try to include deeper integration like OneDrive for Business. This allows users to access the OneDrive Business file from Acrobat app. But it needs admin approve the app. To approve this, we need to do 2 options when the approve window prompted. Did we get the approve windows prompted?

Meanwhile, I notice we have configured conditional access and Required approved client app. And in the app list, Adobe Reader is not included.
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant#require-approved-client-app

To see if our access is blocked by Conditional access policy, we can check the sign in log. If yes, we need to exclude this policy from this user.
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/troubleshoot-conditional-access

Hope it can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

svjs-0437 201 Reputation points

2022-07-25T08:01:56.873+00:00

User get below screen,also they dont have the account in adobe. how can i include/exclude adobe application from conditional access policy.
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2022-07-25T08:30:04.923+00:00

@svjs-0437 ，For the error, it seems the conditional access policy block this. This means the resource you access is only approved to access via the app in approved application list. To avoid this error, we can add the user which shows under the hide part in your picture into the exclude.

Hope it can help.
svjs-0437 201 Reputation points

2022-07-25T12:54:29.503+00:00

i created a sepearet conditional access policy without the required approved app, but again stuck with the below error. adobe being a free app from apple store & google account wat permission does it require, how to permit this.
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2022-07-26T01:37:42.37+00:00

@svjs-0437 ，Thanks for the reply. For the picture, it seems to be the same one for the option one in the article you provided, we can click "Have an admin account? Sign in with that account" and sign in with an Intune administrator to continue.
svjs-0437 201 Reputation points

2022-07-27T11:41:30.253+00:00

Intune admin doesnt have rights it seems, i tried using my id with intune admin right .Also requested my Azure admin to try this too, he reported this is going in loops there.
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2022-07-28T00:42:10.097+00:00

@svjs-0437 , From the official blog, it mentioned to use Intune admin account. But it seems not working. Here, we suggest to open case to check on this. Here is a link with the steps to open case.
https://learn.microsoft.com/en-us/mem/get-support

Thanks for the understanding.
svjs-0437 201 Reputation points

2022-08-01T15:27:59.283+00:00

i managed to get the app working for corporate iOS category, but the same changes is not helping when it comes to BYOD devices. it appeard the app protection policy is not getting applied on BYOD devices, any methof to enforce this on devices?
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2022-08-02T05:34:11.49+00:00

@svjs-0437 , Thanks for the reply. I am glad to hear that the app is working on corporate device. But it is not working on BYOD devices. Please ensure the app protection policy is applied to user group. To check if app protection policy is applied on the BYOD device, we can open Edge and enter about:intunehelp to check the Intune Diagnostic console Here is a link with more details for the reference:
https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-troubleshooting-intune-app-protection-policy-using/ba-p/330372#:~:text=Enter%20about%3Aintunehelp%20in%20the%20navigation%20bar%20of%20the,can%20be%20reviewed%20based%20on%20the%20following%20table.

Hope it can help.

Share via

enable Adobe to read PDF from One drive on ios/Android

1 answer

Your answer