Page Comparison

Microsoft Entra ID

• The goal, requires setting up 2 Conditional Access policies

  • Policy 1 - Allow Mobile Apps only on mobile OS

  • Policy 2 - Block browser and other legacy apps on mobile OS

Image Added

Microsoft Entra ID

• In Policy-2 “Block browser….“ above, in

  • “Target Resources” > “Exclude“ > “Select excluded cloud apps“ > “Atlassian“

Workaround_Video.mov

Atlassian

• Set IP allowlist to office IP addresses only

• See https://support.atlassian.com/security-and-access-policies/docs/specify-ip-addresses-for-product-access/

Atlassian

• Create a Mobile app policy and enable -

  • “Override any IP allowlists to allow access from Jira and Confluence mobile apps“

• https://support.atlassian.com/security-and-access-policies/docs/mobile-policy-mam-security-controls-and-supported-apps/

Customer (NCSoft)

• Customer’s IT team should ensure that BYOD or mobile phones cannot connect to office WiFi, so that they will never be on the “IP Allowlist“ configured in Step-3