GrapheneOS on a Pixel6a for work

Silver_slacker

We use duo to validate the device, I'm trying to log into outlook and I get the below error.

Device not allowed
Your organization requires you to use a trusted device to log in.

I enabled sandbox when setting this up.

DeletedUser87

Silver_slacker if we're talking about Duo mobile, it's entirely possible they require Play Integrity Protection now (which only works on OS'es certified by Google=not GOS). I don't know if that's the case or just a bug, so hopefully someone else here has had similar issues.

grapheine

If your org disabled enrollment of customs OSs, you won't be able to. Luckily, I have admin rights in our M365 tenant, so I created a security group that allows customs OSs kn android, assigned it to myself, and now I can get MS Portal, Onedrive, etc and we use DUO, also.

Silver_slacker

grapheine

Thanks, I'll ask, but I doubt they let me.

grapheine

Silver_slacker you're probably right. But, it's worth a try.

m4ri0g

is this your personal device. common sense says no to mix private and professional life.
if you are professionally required to access your email from your phone then you have your job get you a professional phone that you will not install anything personal from where you can use outlook and all the corporate apps.

grapheine

m4ri0g isn't that the point of multiple users?

TrustExecutor

m4ri0g The phone he gets will have privileged services enabled. That's probably why he/she wants a GrapheneOS device so he/she can enjoy the security features even at work.

missing-root

Agree with above. "Trusted device" might also mea

app installed from playstore
google apps present
no permissions like accessibility granted
no app overlay (like a blue light filter)