Jabber/ Webex for mobile SSO with Azure Conditional Access

[skareem]

Hi,
We have Jabber for iOS/ Android working with SSO via MRA. SSO with Azure works as expected. Devices are managed by a Mobile Device Management solution and synchronised into Azure. We would like to authorise access only for devices which are compliant in the MDM solution using Conditional Access in Azure. As soon as we enable Conditional Access the login does not work as the device is not trusted. The Azure logs show that the "Device ID" is missing.

Wiondering if anyone has experience of setting this up and if so how is the "Device ID" is transmitted to Azure? We suspect this is via the Safari browser but would like to confirm if this should work and if so, how? When we remove Conditional Access we can log in with iOS and Android devices.

[skareem]

In case this helps anyone in the future, we got this working by using the Enterprise SSO Plugin in Mobile Iron. This is an Apple feature for iOS devices where the Mobile Iron configuration pushed down to the device forces it to use Microsoft Authenticator for SSO. This is what Microsoft call a broker which sends the device ID to Azure so that the compliance status of the device can be checked against a Conditional Access Policy in Azure/ Entra. This is also supported with other MDMs