Power Apps/Microsoft Forms login without requiring personal device enrollment (need UPN)

(1) Share

Report

Posted on by BH-26051331-0

We currently use a Microsoft Form (via QR code) for retail employees to submit career interest information. Ideally, we want to auto-capture employee details using their UPN instead of having them manually enter Employee ID and other fields to reduce error checking. However, when we restrict the Form or use a Canvas App requiring login, users are prompted to “set up/secure their device,” due to Conditional Access requiring device compliance, which we want to avoid on personal devices.

Is there a way to allow employees to log in (to capture UPN) without requiring device enrollment? Would Intune MAM (app protection policies) support this for Power Apps or Forms?

Categories:

Building Power Apps

Error handling

General topics

I have the same question (0)

All responses (5)

Answers (0)

Sort by

Suggested answer

11manish 3,323 on at

Like
a
(1)

Report
Copy link

Link copied!
For a large retail workforce using personal devices:

Keep the process simple.

Work with your Entra ID / Security team.

Create a Conditional Access exception for this specific scenario.

Use:

Microsoft Forms ("Only people in my organization")

or a lightweight Power App

Require authentication and MFA if necessary.

Do not require device compliance for this application.

If your security team is unwilling to remove the compliant-device requirement, then Intune MAM/App Protection Policies may be the best compromise, but only if the Conditional Access policy is configured to accept App Protection Policy or Approved Client App as the control instead of requiring a compliant device.

Was this reply helpful? Yes No

WarrenBelz

155,838 Most Valuable Professional on at

Like (0)

Report

Copy link

Link copied!

Hi @BH-26051331-0,

Certainly the issue relates to the Entra Conditional Access policy of your organisation - broadly, the options are

Control	Result
Require device to be marked as compliant	Prompts for Intune enrollment/device registration
Require Hybrid Azure AD joined device	Blocks personal devices
Require approved client	App may force use of specific Microsoft apps
Require app protection policy	May require supported apps but not enrollment
Require MFA	No enrollment required

Another option is to exclude Forms from the compliance requirement (not much risk in this) - you will need to talk to your IT team as to what they consider acceptable.

Please ✅ Does this answer your question if my post helped you solve your issue. This will help others find it more readily. It also closes the item. If the content was useful in other ways, please consider answering Yes to Was this reply helpful? or give it a Like ♥
Visit my blog Practical Power Apps LinkedIn

Was this reply helpful? Yes No

WarrenBelz 155,838 Most Valuable Professional on at

Like
a
(1)

Report
Copy link

Link copied!

Hi @BH-26051331-0,

A quick follow-up to see if you received the answer you were looking for. Happy to assist further if not.

Please ✅ Does this answer your question if my post helped you solve your issue. This will help others find it more readily. It also closes the item. If the content was useful in other ways, please consider answering Yes to Was this reply helpful? or give it a Like ♥
Visit my blog Practical Power Apps LinkedIn

Was this reply helpful? Yes No
BH-26051331-0 2 on at

Like
a
(0)

Report
Copy link

Link copied!

@WarrenBelz Hi! Yes it helped a lot. Gathering all the info I need to meet up and discuss with our IT Team. Thank you again!

Was this reply helpful? Yes No
WarrenBelz 155,838 Most Valuable Professional on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @BH-26051331-0,

Can you please mark this as solved to close the thread.

Was this reply helpful? Yes No