#Outlook app sync settings for android

Enterprise enhanced data protection (Level 2) introduces APP data leakage prevention mechanisms and minimum OS requirements.This is an entry level configuration that provides similar data protection control in Exchange Online mailbox policies and introduces IT and the user population to APP.

#Outlook app sync settings for android

For Android devices, this level validates Android device attestation. Enterprise basic data protection (Level 1) ensures that apps are protected with a PIN and encrypted and performs selective wipe operations.The APP data protection framework is organized into three distinct configuration levels, with each level building off the previous level: To help organizations prioritize mobile client endpoint hardening, Microsoft has introduced taxonomy for its APP data protection framework for iOS and Android mobile app management. For some, it may not be obvious which policy settings are required to implement a complete scenario. The choices available in APP enable organizations to tailor the protection to their specific needs. Create Intune app protection policiesДЄpp Protection Policies (APP) define which apps are allowed and the actions they can take with your organization's data. For more information, see App-based Conditional Access with Intune.

For Android devices, the Intune Company Portal app is required. To leverage app-based conditional access policies, the Microsoft Authenticator app must be installed on iOS devices. This ensures mobile apps using Exchange Web Services, IMAP4, or POP3 protocols with basic authentication cannot connect to Exchange Online. If the user isn't assigned to an Intune App Protection Policy, isn't licensed for Intune, or the app isn't included in the Intune App Protection Policy, then the policy prevents the user from obtaining an access token and gaining access to messaging data.ДЇinally, follow How to: Block legacy authentication to Azure AD with Conditional Access to block legacy authentication for other Exchange protocols on iOS and Android devices this policy should target only Microsoft Exchange Online cloud app and iOS and Android device platforms.

The above policies leverage the grant control Require app protection policy, which ensures that an Intune App Protection Policy is applied to the associated account within Outlook for iOS and Android prior to granting access. This policy ensures mobile users can access all Office endpoints using the applicable apps.ДЇollow 'Step 2: Configure an Azure AD Conditional Access policy for Exchange Online with ActiveSync (EAS)' in Scenario 1: Office 365 apps require approved apps with app protection policies, which prevents Exchange ActiveSync clients leveraging basic authentication from connecting to Exchange Online. Details on creating this policy can be found in Require app protection policy for cloud app access with Conditional Access.ДЇollow 'Step 1: Configure an Azure AD Conditional Access policy for Office 365' in Scenario 1: Office 365 apps require approved apps with app protection policies, which allows Outlook for iOS and Android, but blocks OAuth capable Exchange ActiveSync clients from connecting to Exchange Online. To do this, you will need a conditional access policy that targets all potential users. Organizations can use use Azure AD Conditional Access policies to ensure that users can only access work or school content using Outlook for iOS and Android. At a minimum, you will want to deploy a conditional access policy that allows connectivity to Outlook for iOS and Android from mobile devices and an Intune app protection policy that ensures the collaboration experience is protected. The richest and broadest protection capabilities for Microsoft 365 data are available when you subscribe to the Enterprise Mobility + Security suite, which includes Microsoft Intune and Azure Active Directory Premium features, such as conditional access.

The Outlook for iOS and Android app is designed to enable users in your organization to do more from their mobile devices, by bringing together email, calendar, contacts, and other files. Manage messaging collaboration access by using Outlook for iOS and Android with Microsoft Intune