Conditional Access for the new Yammer Desktop APP

Microsoft has released the Yammer Desktop application for Windows and MacOS – that means that we need to configure Conditional Access to secure our company data.

Before the app was released the only Yammer access that we need to secure on Windows was browser access – now we also need to secure desktop client.

---

First we need to create a Conditional Access rule for Yammer.

Start the Intune or AzureAD management portal at https://portal.azure.com

Click Conditional Access

Create a new Conditional Access policy – and name it so that it makes sense.

Assign it to all users

Select Cloud App – Office 365 Yammer

Select conditions – Device Platform – only Windows (If you are selection All Platforms – then it will block MacOS after the 1 of august 2017)

Select conditions – Device Platform – Client apps – Select “Mobile apps and desktop clients” (Select also Browser if you what to control Browser access in the same policy)

Select Access controls – Grant Access – Require device to be compliant

This will ensure that users can only login and gain access to the company Yammer site when a devices is marked as compliant.

You can also use Block Access if you do not allow access to the yammer app before your company IT department has tested the functionality of the new Yammer App

---

Now for the user experience :

First of all – it seems like the new Yammer Desktop app is random shown to the user in the web interface.

Or you can just download it here.

User experience on a compliant device:

First the app need to be installed – There is no commandline switch on the .exe install file or a .msi som the it can be deployed with SCCM or Intune.

Then the user need to login

And the user have access to Yammer.

When a user tries to login to the new Yammer Desktop App from a non-compliant app the user will get a message “You can’t get there from here” that just means – the devices is not compliant.

If the user click more details – it can also be used to troubleshoot

If you are using the Block Access policy the user will get this message “You cannot access this right now”