Author Topic: Version 1.17.0-1295 - Google Play Beta version  (Read 20762 times)

Nadejda Fudulska, MobiSystems, AquaMail support

  • Administrator
  • Sr. Member
  • *****
  • Posts: 268
    • MobiSystems
Version 1.17.0-1295 - Google Play Beta version
« on: October 02, 2018, 05:49:06 pm »
https://aqua-mail.com/download/AquaMail-market-1.17.0-1295-dev-253ba89b6f6e.apk

---

Version 1.17.0-1295 is our latest beta version published on Google Play

+ Hide Account list screen so the app opens directly into your Inbox
+ Launcher shortcuts (Android OS 7.1 and higher)
+ Office 365: Support for logging in with Intune (Microsoft Corporate Portal)
+ Improved support for Chrome OS and Samsung DEX

To enroll to our Beta Group, please use this link

https://play.google.com/apps/testing/org.kman.AquaMail

---

Версия 1.17.0-1295 выпущена в Google Play в качестве "бета" версии.

+ Сокрытие списка учётных записей чтобы программа открывалась прямо во Входящие.
+ Ярлыки (shortcuts) на иконке (Андроид 7.1+).
+ Office 365: поддержка входа через InTune (Корпоративный портал).
+ Улучшена поддержка Chrome OS и Samsung DEX.

Вы можете присоединиться к бета-тестированию по ссылке ниже

https://play.google.com/apps/testing/org.kman.AquaMail

gmandca

  • Newbie
  • *
  • Posts: 7
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #1 on: October 04, 2018, 06:47:40 pm »
Hi,
after update to this version, sync stop working.
Notificacion show only if I sync manual, but when sync end notification close and do not sync enymore (automaticaly - only manual yet).

HDRules

  • Newbie
  • *
  • Posts: 8
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #2 on: October 04, 2018, 08:14:05 pm »
Hi,
after update to this version, sync stop working.
Notificacion show only if I sync manual, but when sync end notification close and do not sync enymore (automaticaly - only manual yet).

I had the same issue.  The following worked for me: Go to Settings, Mail Receiving, and check the Scheduled Sync box.  On the non-beta version I had Push Mail checked but not Scheduled Sync and it still worked.  But this one change got me back on track.

gmandca

  • Newbie
  • *
  • Posts: 7
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #3 on: October 04, 2018, 08:23:53 pm »
This steps work (only sheduled plan, no push), but if I unchecked option (sheduled sync plan) notification go back to previous state (not show, not sync)  :(
« Last Edit: October 04, 2018, 09:00:48 pm by gmandca »

HDRules

  • Newbie
  • *
  • Posts: 8
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #4 on: October 04, 2018, 10:06:38 pm »
I am not able to add my work email. We use Office 365 and the Intune Portal app.  It seems to be the exact same problem that lijunle reported in the 1.17.0-1194-dev thread (Active Directory at the top and a message saying that sign in was successful but your admin requires your device to be managed by Microsoft).  I have attached my log file.http://cloud.tapatalk.com/s/5bb65e78b68fa/log-AquaMail.txt [nofollow]

Sent from my SM-G950U1 using Tapatalk


Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #5 on: October 05, 2018, 11:10:16 pm »
Re: On the non-beta version I had Push Mail checked but not Scheduled Sync and it still worked

Yes, if you search the forum - there have been cases of "push mail on / scheduled sync off -> trouble".

I always said (wrote) that it's best to keep "scheduled sync" enabled if push mail is on - so we now made "push" dependent on "scheduled".

This makes sense (I believe), there are really three levels:

1 - I will check mail myself -> both scheduled and push are off

2 - I want the app to check mail automatically, every 15 minutes is good enough for me -> scheduled on, push off

3 - I want the app to check mail automatically and instantly -> scheduled on, push on

Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #6 on: October 05, 2018, 11:18:27 pm »
Re:

Quote
I am not able to add my work email. We use Office 365 and the Intune Portal app.  It seems to be the exact same problem that lijunle reported in the 1.17.0-1194-dev thread (Active Directory at the top and a message saying that sign in was successful but your admin requires your device to be managed by Microsoft).  I have attached my log file.

Thank you for the log.

It looks like we (Aqua Mail) found and called the Company Portal app

https://play.google.com/store/apps/details?id=com.microsoft.windowsintune.companyportal


 - but it got back to us with "user canceled the sign in process, there is no data".

Does the error you get look like this?

https://www.aqua-mail.com/forum/index.php?topic=6737.msg40796#msg40796

Does your phone have the Azure Authenticator app *in addition to* the Company Portal app?

https://play.google.com/store/apps/details?id=com.azure.authenticator

And is your account added into Azure maybe? Not InTune?

Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

HDRules

  • Newbie
  • *
  • Posts: 8
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #7 on: October 06, 2018, 02:31:25 am »
Re:

Quote
I am not able to add my work email. We use Office 365 and the Intune Portal app.  It seems to be the exact same problem that lijunle reported in the 1.17.0-1194-dev thread (Active Directory at the top and a message saying that sign in was successful but your admin requires your device to be managed by Microsoft).  I have attached my log file.

Thank you for the log.

It looks like we (Aqua Mail) found and called the Company Portal app

https://play.google.com/store/apps/details?id=com.microsoft.windowsintune.companyportal [nofollow]


 - but it got back to us with "user canceled the sign in process, there is no data".

Does the error you get look like this?

https://www.aqua-mail.com/forum/index.php?topic=6737.msg40796#msg40796

Does your phone have the Azure Authenticator app *in addition to* the Company Portal app?

https://play.google.com/store/apps/details?id=com.azure.authenticator [nofollow]

And is your account added into Azure maybe? Not InTune?
Yes,  that is the screen I got.  I do not have the Azure app installed.  But I have already added my work email in another email app (Nine).  Any chance that Intune won't let me add the same account more than once? Guess I can remove my account from Nine to test that theory.

Sent from my SM-G950U1 using Tapatalk


HDRules

  • Newbie
  • *
  • Posts: 8
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #8 on: October 06, 2018, 03:44:50 am »
Instead of deleting my account from Nine,  I installed Outlook and added my account there.  Outlook required that I activate it as a Device Admin app.  And Nine required me to do that too.  I'm guessing AquaMail needs to do the same and then it will work for me. Does that sound logical to you?

Sent from my SM-G950U1 using Tapatalk


Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #9 on: October 06, 2018, 10:23:24 pm »
Re: Yes,  that is the screen I got.  I do not have the Azure app installed. 

Hmmm..... Because when Aqua runs InTune app - it gets back "user cancelled"

Re: Outlook required that I activate it as a Device Admin app.  And Nine required me to do that too.  I'm guessing AquaMail needs to do the same and then it will work for me. Does that sound logical to you?

No. It's different.

With "broker based" (InTune) authentication - the app that installs itself as Device Admin and checks device security is InTune App not us.

Is your account added in the InTune app?

Re: But I have already added my work email in another email app (Nine).  Any chance that Intune won't let me add the same account more than once? Guess I can remove my account from Nine to test that theory.

No. No connection.

---

Please try my "test app" just follow the procedure here:

https://www.aqua-mail.com/forum/index.php?topic=6737.msg40820#msg40820

Let's see if you're able to log in - via InTune - in that test app.

If you are - please send the capture log file directly to my personal account: kmansoft / gmail

This sample uses Microsoft's official library for "talking to" InTune.
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

HDRules

  • Newbie
  • *
  • Posts: 8
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #10 on: October 07, 2018, 03:42:16 am »
Re: Yes,  that is the screen I got.  I do not have the Azure app installed. 

Hmmm..... Because when Aqua runs InTune app - it gets back "user cancelled"

Re: Outlook required that I activate it as a Device Admin app.  And Nine required me to do that too.  I'm guessing AquaMail needs to do the same and then it will work for me. Does that sound logical to you?

No. It's different.

With "broker based" (InTune) authentication - the app that installs itself as Device Admin and checks device security is InTune App not us.

Is your account added in the InTune app?

Re: But I have already added my work email in another email app (Nine).  Any chance that Intune won't let me add the same account more than once? Guess I can remove my account from Nine to test that theory.

No. No connection.

---

Please try my "test app" just follow the procedure here:

https://www.aqua-mail.com/forum/index.php?topic=6737.msg40820#msg40820

Let's see if you're able to log in - via InTune - in that test app.

If you are - please send the capture log file directly to my personal account: kmansoft / gmail

This sample uses Microsoft's official library for "talking to" InTune.
My account is added to Intune and the app says my device is in compliance.  I ran the test app but was not able to login.   Please see the attached screenshot. I can email the log if you'd like to take a look.  Thank you for working on this.

Sent from my SM-G950U1 using Tapatalk


Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #11 on: October 07, 2018, 12:27:15 pm »
Re: My account is added to Intune and the app says my device is in compliance.  I ran the test app but was not able to login.

Thank you.

This app uses Microsoft's official library for performing InTune authentication.

Looking at the screenshot - the issue a corporate policy requiring any "new" app to be approved by the corporate admin.

That's in the "Message" in your screenshot.

It's entirely possible that both Nine and Gmail are already approved (once and for all users).

I won't be able to "break through" this requirement - if we could, it would be a security hole from Microsoft's / corporate IT's point of view.

Please ask your IT people about the possibility of "approving" Aqua Mail.
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

HDRules

  • Newbie
  • *
  • Posts: 8
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #12 on: October 07, 2018, 10:04:21 pm »
Re: My account is added to Intune and the app says my device is in compliance.  I ran the test app but was not able to login.

Thank you.

This app uses Microsoft's official library for performing InTune authentication.

Looking at the screenshot - the issue a corporate policy requiring any "new" app to be approved by the corporate admin.

That's in the "Message" in your screenshot.

It's entirely possible that both Nine and Gmail are already approved (once and for all users).

I won't be able to "break through" this requirement - if we could, it would be a security hole from Microsoft's / corporate IT's point of view.

Please ask your IT people about the possibility of "approving" Aqua Mail.
Thank you for the explanation.  My company is super serious with security.  Locking out a phone at the app level sounds like something they would do.  I'll see if I can get approval.

Sent from my SM-G950U1 using Tapatalk


Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #13 on: October 08, 2018, 06:08:24 pm »
RE:  I'll see if I can get approval.

And just to add $0.02 -

The way we integrate with InTune is - we have to obtain a new "access token" every hour from the InTune app (happens automatically in the background).

InTune app will only let us do that if the phone is *still* in compliance with InTune policies and will deny access if it's not.

( policies are things like: "rooted phones allowed or not, have to install an approved anti-virus, ..." ).


Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

HDRules

  • Newbie
  • *
  • Posts: 8
Re: Version 1.17.0-1295 - Google Play Beta version
« Reply #14 on: October 09, 2018, 09:52:35 pm »
RE:  I'll see if I can get approval.

And just to add $0.02 -

The way we integrate with InTune is - we have to obtain a new "access token" every hour from the InTune app (happens automatically in the background).

InTune app will only let us do that if the phone is *still* in compliance with InTune policies and will deny access if it's not.

( policies are things like: "rooted phones allowed or not, have to install an approved anti-virus, ..." ).

I asked the security folks in IT to add AquaMail as a permitted app.  They said that was not necessary and that the app should just work with Intune since neither my device nor the app was listed as being quarantined.  I showed them the error message ("Aqua Mail needs permission to access resources in your organization that only an admin can grant") and they said: "I’m not seeing that app on the back end, so can’t really do anything.  It may have to do with the mobile access client, but would need to dig in further to find out."  So I guess AquaMail is not making it past Intune?