Using the Passle app alongside Intune App Protection Policies
The Passle app works on managed mobile devices, and adding a quick one-off exemption, to App Protection Policies in Microsoft Intune, ensures your lawyers have full access to every feature, including SSO login, ISTATOY and Quick share.
Why add an exemption?
Intune App Protection Policies, keep work data safe on mobile devices, and by default, can stop managed browsers (e.g. Edge), handing users back to the Passle app after sign in, or opening e.g. the Outlook app, to start an ISTATOY.
Adding Passle as an exempt app, enables handoffs to happen as normal, and only takes a couple of minutes via the Intune admin centre.
How to add the exemption
1. In the Microsoft Intune admin centre, go to Apps → Protection → [your policy] → Properties → Data protection → Send org data to other apps → Select apps to exempt.
2. In the Exempt apps window, add the following entries:
iOS
Name: Passle - iOS
Value: passle
Android
Name: Passle - Android
Value: passle.bookmarkletv4
3. Save the policy.
Once the policy syncs to devices, Lawyers can sign in with SSO and send ISTATOYs and Quick shares immediately.
We have confirmed that the iOS exemption fully restores SSO and functionality. We recommend a quick test on Android devices to confirm the same result, in your environment.
For more detail, see Microsoft’s guide: Create exceptions to Intune App Protection Policy data transfer restrictions
Good to know
- The exemption is narrowly scoped, only affecting Intune App Protection data-transfer rules. Other security controls remain unaffected.
- Your other policies will still apply, such as MDM restrictions, Conditional Access, device compliance and mandatory app protection. Users need to meet those as usual to sign in.
- The exemption covers all supported app-to-app interactions with Passle (vs just SSO), so everything works as intended.
-
As with any policy change, we recommend your conferring with your IT or Security team, to ensure that they agree with and approve it can go ahead.
Using a UEM tool?
If you manage apps through a unified endpoint management tool such as Omnissa Workspace ONE UEM, you may need to add a matching Data Loss Prevention (DLP) exemption there also.
See Omnissa’s guide for more information: Microsoft Intune App Protection Policies Integration
Contact our support team, if you would like to further discuss setup steps, or any other queries.