Configure Azure Active
Directory conditional access
Azure
Active
Directory
conditional access- In theBlackBerry UEMmanagement console, clickSettings > External integration > Azure Active Directory Conditional Access.
- In the table, click
.
- Type a name for the configuration.
- In theAzure clouddrop-down list, selectGlobal.
- Type yourAzure tenant ID.You can enter either the tenant name, which is in FQDN format, or the unique tenant ID, which is in GUID format.
- In the device mapping override, selectUPNorEmail.By default, UPN is selected. If UPN is used, you should verify that theAzure ADtenant and all mapped directories share the same UPN value for users before you save the connection. After you save the connection, the device mapping override cannot be changed.
- In theAvailable company directorieslist, select one or more directory instances and click
.
- ClickSave.
- Select the administrator account that you want to use to log in to yourAzuretenant.The administrator account must be able to grant permissions to the app to access resources in your organization. such as global administrator, cloud application administrator, or application administrator.
- Accept theMicrosoftpermission request.