If you have configured Entra ID conditional access for your organization, you can configure BlackBerry UEM as a compliance partner so that iOS and Android devices that are managed by UEM can be recognized as compliant by Intune when accessing your cloud-based apps such as Office 365.

You can configure more than one UEM tenant for each Entra tenant, but all UEM tenants will share the same partner compliance management entry. Entra cannot differentiate which UEM tenant a compliance status update originates from. You can configure a UEM tenant to connect to one or more Entra tenants. You must add a directory connection to UEM for each Entra tenant.

When users activate their devices on UEM, UEM reports the device compliance status to Entra. The compliance requirement is satisfied without having to enroll devices directly with Intune. UEM will notify Entra when a device is out of compliance or when a device returns to compliance.

If you do not want to use the "Required device to be marked as compliant" conditional access control in Entra, and you want to use trusted locations to control access from devices that are inside your network, you can accomplish this in UEM by routing traffic to Microsoft services through your organization's BlackBerry Connectivity Node instances. In this scenario, you do not need to follow the instructions in this section to connect UEM to Entra ID for conditional access.