Configuring an app protection policy
For our BYOD devices, we cannot rely on device restrictions, as they are limited to corporate devices that have been fully enrolled. As with Android devices, which were covered in Chapter 5, we want to implement app protection policies to ensure the data is securely stored on user-owned devices.
Unlike Android, iOS does not support multiple profiles, so while the data is protected in the same way, it is less segregated on the device.
Getting started
The Conditional access policy configured in the Android app protection policy in Chapter 5 was configured for both Android and iOS devices, so rather than run through the same steps in this recipe (if you have not configured that yet), read the Android recipe and configure the policy appropriately. This is used to force your devices to only connect if the application is policy-managed.
How to do it…
Follow these instructions:
- First, we need to navigate to Apps and click...
