Add devices to azure AD for authentication of webapp purpose

We have some Android devices in production that are running a webapp connected through mobile internet. Hence MFA is used. I would prefer not having to have Microsoft Authenticator installed on these devices for the shared accounts, due to user experience.

Is it possible to add enrolled devices in Azure AD, so devices will be trusted and only require usarname and password for the webapp we are running on the devices?

2 years ago
Android
ANSWERS
RS
Rafael Schäfer
2 years ago

As far as i remember, this should be possible. We currently don't use that but it was discussed in the past.
I think i remember that those devices also have to be enrolled to the specified user with an enrollment rule where you have to authenticate, so you would need to factory reset those devices and enroll again when all preparations are done.

So, i think you need (but maybe I'm wrong):

  1. Add AzureAD connection to your Mobicontrol
  2. Create new enrollment Rule including authentication
  3. Re-Enroll the devices using the new enrollment rule

But I bet someone else with experience in this can help you here better.

MK
Morgan Karlsson
2 years ago

It makes sense and sounds like something that should work.

Guess i will have to try it out and see if it gets me anywhere :)

Thanks!

RS
Rafael Schäfer
2 years ago

Did you get it working?