How do we prevent connections to our O365/SharePoint Online sites from the SharePoint mobile device on unmanaged mobile devices?

We cannot prevent people from installing the app on their device so how can we prevent connections from the app to our tenancy?

  • 1
    I don't believe you will be able to, you might want to look into InTune subscription to manage it if it is an issue – Eric Alexander Jul 11 '16 at 20:43
  • We don't use InTune. Any way to prevent without InTune? – motionpotion Jul 12 '16 at 21:57

You can't prevent it in the service, but you can force devices to enroll and accept defined policies.

With the native O365 MDM rules, you can require devices be enrolled before accessing services. Create a new MDM policy and apply it to a test group, assign a test user. Now any supported device that uses an app to login with an ID in that test group should trigger a request to enroll that device.

Technically, I think you could do this (block an app) with ADFS and be checking something like User-Agent string, but I think services like Okta or OneLogin can help with that specific scenario without having to craft special rules. I would expect it to come with a lot of overhead in keeping up with it, and a high likelihood of unintended consequences, like breaking apps you didn't intend to.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.