Looking at the Azure “Sign-in logs” we can see a successful login for the testuser into the example app. BUT what is NOT happening here is, that the IntuneSdk “GUI” kicks in and tells the user that “the App is now being protected by Intune”… also what’s NOT happening is that the User has to set a PIN for this App (which we have configured in the app protection policy). As we’re mam registered now, MSAL always returns a valid token on DoSilentAsync or if needed on DoInteractiveAsync, even if the app is completely restarted. After DoMAMRegister was successful, MSAL returns a valid Token on the following DoSilentAsync method call. While debugging the provided example app we see that „IntuneAppProtectionPolicyRequiredException“ get fired once at the first login, which then triggers the DoMAMRegister method.

Xamarin Android - Conditional Access Grant Control “require app protection policy” does NOT enforce app protection policy.īased on that great Microsoft Article from here:

Ms authenticator app android