How to configure conditional access policies for the VMS App
If you use Microsoft Intune/Microsoft Endpoint Manager then please be aware of the following:
Important - Space Connect’s Rooms permissions have a service dependency on Microsoft’s Graph API. This means that it cannot be included or excluded in the conditional access policies without also including/excluding the Office 365 app.A service account should be created to be used with the VMS app.
We recommend that this service account is configured with its own conditional access policy (via Microsoft Endpoint Manager) with the following configuration:
Users - Include the Service Account.Cloud apps or actions
Exclude the following Apps:
- Space Connect
- Space Connect Rooms
- Space Connect Native
- Office 365
Conditions - Device platforms - Android/iOS > Grant Access
One or more of the following options:
- Require multi-factor authentication
- Require password change