App conditional access

Follow

Conditional Access 

The amount of information people have to process nowadays is vast, also in the workplace which can decrease productivity. A lot of this information isn’t relevant at all times. As an admin, you can set Conditional Access to applications from the App Store in your workspace, so people see the correct information and applications at the right times. 

Conditional Access is a valuable tool to filter all this information and allows you to only see the applications relevant to you at the right time, based on your location and device, so you don’t see all your apps, all the time. It can unclutter the workspace, create awareness, offer more security, enhance positive user experience and truly simplify work for people with an adaptive workspace.  

 
Conditions 

There are four different conditions you can set to create an adaptive Workspace 

  1. Devices 
  2. Operating systems 
  3. Browsers 
  4. IP ranges 

 

Besides defining your conditions, you can determine the visibility: either the application is greyed out or not visible at all. When a greyed out tile is clicked on, a notification pops up with information of the condition(s) set. 

When an application is not visible, you have the option for the workspace to rearrange and align the tiles, so no gaps are left. The workspace does this by reordering the tiles from large to small and pushing them to the top left of the group.  

 

Security and User Experience 

Security is an important part of conditional accessYou can restrict access to certain applications and information, like company sensitive information outside the company network or on a different operating system like a smartphone. 

However, one of the most important things to take into account with conditional access is the user experience. Not everyone will understand that some applications have conditions set to them and that they work differently under some circumstances. To prevent confusion and questions, it’s important to think about your conditions and how to set them. 

When an employee works from a different location or switches deviceyou want them to have the same smooth experience opening applications, which will also decrease service calls and increase productivity. 

 

To hide or not to hide? 

Take Photoshop for instance. This is a local applicationbut there are different ways to access it and you can make sure it’s always opened the way you want it to. You can set the conditions in such a way that when an employee works from another location and device, they can use Photoshop the way they’re used to, by offering the application as a remote app. In this scenario, you hide the local Photoshop app and show the published Clientless RDP app 

Conditional access is also a great way to create awareness. For example: if you want to show a care worker that is isn’t safe to open patient files on a public network or on their phone, set conditions of the IP ranges and/or types of devices on the application(s) in question and grey out the tile. When they click on it they will receive a notification explaining the conditions set.  

Some applications are only accessible in specific browsers. With the browser condition settings, you can offer these applicationsregardless of the preferred browser. The user will be informed what the conditions are when they click on the application and can switch browsers accordingly.  

When an employee uses their phone to work, they really don’t need to see every application – mostly because they probably can’t open them all anyway. In this case, it would be wise to set the conditions so that they only see the applications they really need and that work well on mobile phones. 

 

 

In "App Store" you can set the configuration and customization of the desired app. The "Conditional access" tab is the place where you configure possible restrictions for accessing applications. Additional settings like "Settings""Who has access" and "Maintenance" is described here.

mceclip1.png

Globally you can choose wherther the tile is greyed-out or hidden when one of the conditions are met:

There are four conditions which you can set. 

By default each condition is set to all. It is possible to combine the conditions. 

Visibility

Admins have the option to decide if tiles will either be shown or hidden when the access is denied due to Conditional Access settings.

Devices

With devices you can choose on which device(s) the app is available.

When the user tries to open the application while the requirements are not met, a notification will be shown.

 

Operating Systems

When the user tries to open the application while the requirements are not met, a notification will be shown.

Browsers

With browsers you can choose on which browser(s) the app is available. E.g. This way you can make apps available if they can only run in Internet Explorer for usage of ActiveX.

When the user tries to open the application while the requirements are not met, a notification will be shown.

 

IP ranges

With IP ranges you can choose on which IP range(s) the app is available. This way you can make the app only available from trusted IP ranges e.g. the company network.

When the user tries to open the application while the requirements are not met, a notification will be shown.

 

 

 

Have more questions? Submit a request