Version 1.17.0-1295 - Google Play Beta version

[Kostya Vasilyev]

At this point we have users who've successfully used Aqua Mail + InTune - including our internal test environment but not only.

On your phone (and not only) - we already direct the login process through InTune and the error you're getting is "there" not in Aqua Mail.

So it's probably an InTune policy or an Azure Active Directory setting.

( at least the above is my understanding )

Maybe one of these will help:

https://www.google.ru/search?q=aadsts900094

https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_exchon-mso_o365b/cannot-sign-in-to-office-365-exchange-with-azure/5a804d1f-c0e6-4f61-89b1-682077f2ed38

[HDRules]

At this point we have users who've successfully used Aqua Mail + InTune - including our internal test environment but not only.

On your phone (and not only) - we already direct the login process through InTune and the error you're getting is "there" not in Aqua Mail.

So it's probably an InTune policy or an Azure Active Directory setting.

( at least the above is my understanding )

Maybe one of these will help:

https://www.google.ru/search?q=aadsts900094 [nofollow]

https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_exchon-mso_o365b/cannot-sign-in-to-office-365-exchange-with-azure/5a804d1f-c0e6-4f61-89b1-682077f2ed38 [nofollow]

Don't take this the wrong way,  but I'm going to play devil's advocate: Four other email apps (GMail,  Samsung Email,  Nine and Outlook) all work for me but AquaMail doesn't. That does not sound like an issue with Intune or a setting.

The error message says that Aqua Mail needs permission to access resources in your company that only an admin can grant.  I do not have admin access rights at my company.  I'm guessing you do have admin rights and perhaps the other beta testers who have successfully signed in do too.  Is AquaMail asking Intune for rights that a regular user would not have?

Sent from my SM-G950U1 using Tapatalk

[Kostya Vasilyev]

Re: GMail,  Samsung Email,  Nine and Outlook

All use a completely different technology to access Exchange - Active Sync vs. EWS (Exchange Web Services) in Aqua Mail.

Not that there is anything wrong with EWS.

And like I already wrote - we do have other users who've already tried Aqua Mail + InTune and it worked.

---

Re: I'm guessing you do have admin rights

No I do not have admin rights in our "internal test account" - we intentionally used a whole different, unrelated, domain (from the domain where Aqua Mail "registration" is).

---

Re: perhaps the other beta testers who have successfully signed in do too

No.

---

The error message is quite specific. And you are getting it *in the InTune app*.

I believe the underlying cause is that your admins - being security "conscious" as you said yourself - have turned off the ability for users to "add" new apps into your "corporate system" ("add" means "register allow access to your domain user's data").



And so this "registration" now requires manual intervention from your company's admins.

Maybe it can be done right in the InTune app - if you hand you phone over to an admin and he/she "does something" - but I don't know enough about InTune app to know for sure. The admins should, it's their job to know these things.