how to get an app approved for use in schools

Under Conditions > Client apps, set Configure to Yes.Under Cloud apps or actions, select Select apps.This policy will block all Exchange ActiveSync clients using basic authentication from connecting to Exchange Online. Select Create to create to enable your policy.Īfter confirming your settings using report-only mode, an administrator can move the Enable policy toggle from Report-only to On.

Confirm your settings and set Enable policy to Report-only.For multiple controls select Require one of the selected controls.Select Require approved client app and Require app protection policy.Under Access controls > Grant, select Grant access.Under Include, Select device platforms.Under Conditions > Device platforms, set Configure to Yes.Under Cloud apps or actions, select All cloud apps.If you don't exclude any accounts, you can't create the policy. Under Exclude, select Users and groups and exclude at least one account to prevent yourself from being locked out.Under Assignments, select Users and groups.We recommend that organizations create a meaningful standard for the names of their policies. Browse to Azure Active Directory > Security > Conditional Access.Sign in to the Azure portal as a global administrator, security administrator, or Conditional Access administrator.Organizations can choose to deploy this policy using the steps outlined below or using the Conditional Access templates (Preview). This policy works in tandem with an app protection policy created in Microsoft Intune. This policy will also prevent the use of Exchange ActiveSync clients using basic authentication on mobile devices. The following steps will help create a Conditional Access policy requiring an approved client app or an app protection policy when using an iOS/iPadOS or Android device. Require approved client apps or app protection policy with mobile devices When administrators are comfortable that the policies apply as they intend, they can switch to On or stage the deployment by adding specific groups and excluding others. The policies below are put in to Report-only mode to start so administrators can determine the impact they'll have on existing users. Require app protection policy is enforced when the app supports that grant control.įor more information about the benefits of using app protection policies, see the article App protection policies overview. This is used within policy to enable users to utilize apps that support either the Require app protection policy or Require approved client app grant controls. 'Require one of the selected controls' under grant controls is like an OR clause.

How to get an app approved for use in schools