Share via

User Experiencing Android Device Intune Issue

Dheeman Das 46 Reputation points
2022-08-23T14:44:09.27+00:00

One of our customers has an Android phone running version 12 and Intune refuses to allow it access. The user received an access denied message when attempting to sign in.

Checking CA I can see that these are the two triggering policies when sign-in fails.

He’s installing Intune through the link provided by Outlook when signing into the app.

He’s able to sign into Intune and I can verify this in Azure. It’s Teams, Outlook, and OneDrive that are blocked by CA. There are 13 other Android users, but no one else is having this issue. It was working 10 days ago, and the user didn’t update the OS to his knowledge.

The authenticator seemed to be the issue for Teams and OneDrive. Outlook is still looping the login. Their most recent email “I just tried to login to outlook on my phone again. It take me to the password and authenticator process, then just loops back to that. No success. Please advise.”

Please see the below image-

234161-image.png

234152-image.png

234050-image.png

Can anyone help me on this?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Intune | Other

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Crystal-MSFT 54,201 Reputation points Microsoft External Staff
    2022-08-24T04:23:28.447+00:00

    @DheemanDas-0192, From your description, it seems you set a Conditional Access policy which block the Teams, outlook, OneDrive access.

    In your configuration, I find we have set "Require approved client app" and "Require app protection policy". I notice Microsoft Teams, Outlook, OneDrive are in the approved client app list.
    https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant#require-approved-client-app

    So it can be that there's no app protection policy present on Microsoft Teams app. Please create an Android app protection policy for these users with these apps to see if the result will be different.
    https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-android

    Hope it can help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.