O365/iOS Mail: Prompted to re-enter password whenever leave school/arrive in school

[howartp]

Hello

 

We've just migrated from Exchange On-Prem to 365 and seem to be having an issue with devices needing to re-enter password whenever they leave school, and again when they arrive in school. We have 2000 users and it's only seemingly happening for about 6-8 at the moment, but the number is steadily increasing so i'm wondering if it's actually a bigger problem and folk aren't reporting it assuming we know about it!

 

I'm presuming this is therefore when their external IP changes and their session is no longer valid?

 

All they have to do is go Settings > Mail > Accounts > click Re-enter password - this pops up the modern auth dialog on MS - they don't actually have to type anything in, it just automatically confirms using the known session.

 

Has anyone had this? Anyone know what's causing it?

 

We've done a lot with conditional access policies and MFA - might we have tightened something too much?

 

Any help appreciated.

 

Peter

[Michael]

Any reason why you're not using the Outlook App rather than iOS Mail?

[howartp]

Any reason why you're not using the Outlook App rather than iOS Mail?

Until last night I wouldn't have had an answer for that.

 

The Deputy Head uses both - Outlook for calendars as one member of staff adds him to tonnes of unnecessary appointments and he can't see the wood for the trees in iOS - layout is better in Outlook apparently.

 

But he uses iOS for email because he prefers it.

 

We've never considered using Outlook on the iPads; why should we when iOS is there and (for 11 years) has worked seemlessly?

[EssentialRug]

Just to chuck my 2 cents in...we prefer to use the Outlook app so have pushed that as the client to use. Also helps because we've got some app protection policies set up in Intune for it. Will be honest I didn't even look to see if this was doable with the iOS Mail app though.

[Michael]

There lies the problem, you end up supporting multiple Apps. I've blocked the Mail App for years on iOS in favour of the Outlook App and Google Chrome on the desktop.

 

The other reason of course is the Outlook App's supported on iOS and Android and is pretty much identical as far as I'm aware.