In the June update for Microsoft Intune it also came with the release of Conditional Access to Microsoft Dynamics CRM Online.

This blog post is not about Microsoft Dynamics CRM Online – but a post about securing access to CRM.


Go into http://manage.microsoft.com Policy -> Conditional Access -> Dynamic CRM Online Policy

Prereq to enable this feature is you need a Dynamics active subscription – in the test environment it can be a trail license.

Select : Enable conditional access policy

CRM CA 01

Then the policy can be configured.

In this first release it is only possible to apply the policy for IOS and Android.

Like any other conditional access policy in Intune you need to select a target group.

And it is possible to select and exempt group also.

CRM CA 02


How does it looks like  from a user perspective:

Start the Dynamics CRM app from a IOS device

IOS CRM APP 01

When trying to access CRM from a IOS device that are non compliant you get this message.

IOS CRM APP 02

Enroll the device by following the link.

Get the device Enrolled and compliant.

IOS CRM APP 03

Then you have access to the Microsoft Dynamics CRM Online

IOS CRM APP 04