microsoftconnect / Taskr-Sample-Intune-Android-App

Taskr is a simple, open source, Android app designed to let you test out the capabilities of the Microsoft Intune APP SDK.
MIT License
21 stars 18 forks source link

Issue with Conditional Access & Cross-app SSO - Error Code 53009 #42

Closed ACivilise closed 8 months ago

ACivilise commented 9 months ago

Hi,

We have been able to successfully run our application with Conditional Access and Cross-app SSO on Android for a majority of users. However, we're facing an issue with a subset of users who are unable to access the application.

Upon checking the sign-in logs in the Azure portal, we're seeing an error code 53009, stating: "Application needs to enforce Intune protection policies." Additional details provided are "MFA completed in Azure AD".

Within the "Authentication Details" tab, it shows that "MFA successfully completed". We've verified that the phones for these users are enrolled properly.

Interestingly, we've observed that once these users log in to Outlook, they regain access to our app.

This issue seems to be affecting only some users and we have been unable to identify a pattern or common factor among them. Any insights into why this specific behaviour is occurring would be very helpful.

mcsimons commented 8 months ago

Hi @ACivilise, Could you please re-open this issue in our main MAM SDK github? https://github.com/msintuneappsdk/ms-intune-app-sdk-android/issues The main one also provides templates when opening issues to help guide you through providing all the information we will require to investigate this further. We will for sure require Company Portal logs to fully investigate (details for capturing logs is in the templates) Thank you.

ACivilise commented 8 months ago

msintuneappsdk/ms-intune-app-sdk-android#212