Zoom for InTune App does not work with managed App Microsoft Outlook

[Blacky84]

Good morning,

We have the following problem in Intune with the Zoom for InTune app:

The employee receives a Zoom invitation in Outlook on the smartphone via Outlook. He opens this link and afterwards the following error message appears:

"Action not allowed: This data is protected by your organisation. You must log in to the app with your account "...." to access the data. If you are already logged in with "...." contact your IT administrator.

We have set the following via InTune:

Zomm for InTune released via the VPP for the client.
Assigned the app to all devices and this app is also installed
Approved the app as an enterprise app in the Azure Portal as a global administrator.
Approved the app in the Protection Policy.

Can you perhaps give me some tips on what I need to configure, although everything fits according to the documentation.

Thank you very much.

Greetings

Markus

[Blacky84 · Accepted solution]

Hi Brandon,

the solution was that there was still an app configuration profile missing via InTune that I had to adjust.

Now everything works fine.

Greetings

Markus

[YaBoiB]

Hello,
My name is Brandon. Thanks for joining the Zoom Community! Zoom previously used ADAL to do the authentication for Intune. Microsoft announced that they would stop supporting and updating ADAL and recommends migrating to MSAL. ADAL uses Microsoft default app ID thus does not need additional permissions. MSAL does not support the default app ID anymore and needs the app to have its app id thus, additional permissions are required.

Solution

1. The admin needs to login to Microsoft Azure（Intune service） using their Microsoft Azure/Intune admin account(Not Zoom admin account).

2. In the Azure portal, re-grant the permissions on the account level for only one time, addressing the issue. Screenshot attached below:

 

[2345kart]

Please help me with the Azure Admin consent direct URL for zoom for intune app, where I can use it in browser to grant admin consent.

[Blacky84]

Hello,

Thank you for your help.
I have already set this permission several times.

This window looks like this for me.

The error still persists.

I get this message in the Azure Portal on sign-ins.

[YaBoiB]

Hello @Blacky84,

 Would you mind if I submitted a support ticket on your behalf? I can work on this for you in the support setting. 

[Blacky84]

Hi YaBoiB,

yes you can.

Markus

[YaBoiB]

Hello @Blacky84, 

 The Moderators will create a ticket for you. Please look for an email in your inbox from Zoom soon! 

Thank you for allowing us to work with you on this issue. 

[Blacky84]

Good morning,

No ticket has arrived yet.
When was this supposed to be created?

Greetings

Markus

[YaBoiB]

Hello @Blacky84,

 The ticket number is 13295899 and an Agent should be reaching out to you shortly. Thank you for your patience thusfar. 

[YaBoiB]

Hello,
My name is Brandon. Thanks for joining the community!
If the solution that I have provided works for you, please click on the "Accepted as Solution" button in the bottom right corner.

[Blacky84 · Accepted solution]

Hi Brandon,

the solution was that there was still an app configuration profile missing via InTune that I had to adjust.

Now everything works fine.

Greetings

Markus

[YaBoiB · Accepted solution]

Hello @Blacky84,

 Can you please hit the accepted solution button so that other community members can see this when they search for it? Thank you for working with me on this issue. I truly appreciate the assistance. 

[MKi7]

What changes did you make to get it working?

Thanks in advance.

[bcarrington]

Shame for not posting the solution! Cmon guys 🙂

Alright so head to your App Protection policy in Intune. Click Edit next to Data Protection, and add "zoomus" to the list of apps to exempt. Don't forget the semicolons.

Allow a couple of hours for this to take effect.

[YaBoiB]

We were just waiting for you to share it with us! 😃

I do not have an Intune lab or I might have shared it. 

Thanks for sharing the solution and screenshot. Very kind of you. 

Regards,

Brandon

[kleinmat4103]

We are having a similar issue with SSO login on the Android side, but the above solution does not work for Android work profiles. Anyone have a solution to that?

Thanks!

[ELucius]

If you exempt this from the app protection policy won't that allow users to download and upload things that they shouldn't to and from the corporate app?

[DW42]

That is correct.

[suvom3171]

Hi Sir,

I tried this, zoom is working but user can share organization data from OneDrive. Also user can join private zoom meeting and share data. Is their any way to stop sending data using zoom. 

Thanks in advance.

REgards

Suvom