By disabling the ability for users in your Office tenant to consent to apps (best security practice) you may run into an issue when your first Apple iPhone user tries to access their work emails similar to the image below –

So there’s two ways around this, you can either –

• Allow your users to consent to apps which although not ideal is a valid option – Managing user consent to apps in Microsoft 365
• Authorise the application on the users behalf.

In this article I’ll cover how to quickly authorise the application, before that though I’d like to explain why opening up the ability to consent to apps to any user is a bad idea – What is the illicit consent grant attack in Office 365?

Continue reading “Apple Internet Accounts Approval Required”