Conditional Access

Summary

Any devices used by university employees and related that do not meet the minimum requirements, as defined in the device's assigned compliance policy, will not be granted full access to University apps, systems and data. This includes devices, both university-owned and personal, that are not enrolled in Intune

Body

Conditional Access has become more important with the shift to mobile and cloud applications, along with the growing number of cybersecurity threats. The process allows the verification of both devices and users by applying a predefined set of automated policies. These policies serve as a safeguard for University networks and data. The policies can be tailored to specific factors such as user profiles, device status, time of day, geographic location, and the specific data the user attempts to access.

Device Compliance Policies

Any devices used by university employees that do not meet the minimum requirements, as defined in the device's assigned compliance policy, will not be granted full access to University apps, systems and data. This includes devices, both university-owned and personal, that are not enrolled in Intune - a device administration platform designed to assess compliance and automate software provisioning and updates. This approach is known as conditional access and is required in order to protect University systems and data from threats such as ransomware, viruses and other types of malware. IT Services is currently running a pilot implementation of conditional access involving a limited number of users. The full implementation is expected to take place in Q4 of 2023.

Minimum requirements vary for different operating systems:

When you try to access University apps, systems and data on a device that is non-compliant, the following message will come up:

Clicking the Open button will launch Company Portal app that will provide additional information about your device. 

Scroll down, until you see two links

  • Click on Learn More to see more details on your device compliance status.
  • Click on Check status to refresh your device compliance status. This process may take a while.

Details

Details

Article ID: 139049
Created
Fri 10/29/21 10:29 AM
Modified
Thu 10/31/24 4:31 PM

Related Articles

Related Articles (4)

Browser Support for University Apps and Systems
This article explains which browsers should be used for the optimal experience with systems and apps used at the University of Windows, such as Microsoft 365, Brightspace, UWinsite, etc.
Device Compliance - Mac
In order for your Apple macOS computer to be deemed as compliant, it must meet a number of requirements. Non-compliant devices will not be able to access most of University systems and data.
Device Compliance - Windows
In order for your work computer to be deemed as compliant, it must meet a number of requirements. Non-compliant devices will not be able to access some of the resources and systems starting in Q4 of 2023.
Known issue: Conditional access blocking Yuja desktop app
Device compliance-based conditional access policy requires registered and compliant device to sign into Yuja desktop app but access is not granted to user when attempted on a managed and compliant device. This article provides a workaround for this issue.