Bypassing exchange security features to use S5's fingerprint ability

[altjx]

I'm currently using CloudMagic to receive email from my exchange account because I can't add it to the default email app. This is because exchange requires me to use a PIN as opposed to allowing me to use the fingerprint scanner.

However, I can't sync calendars and contacts either, so I'm kind of stuck right now. I seriously don't want to have to revert to a PIN for authentication.

Does anyone know of any good tips to bypassing the security features exchange tries to configure when setting up exchange accounts?

Any help would be greatly appreciated.

 

[AZgl1500]

I would like an answer to this problem also.

 

[Mittar]

As would I. I was told by my IT support that it was up to the exchange/email company to update their software to allow finger prints as authentication.

 

[nicholb]

As would I. I was told by my IT support that it was up to the exchange/email company to update their software to allow finger prints as authentication.

Exchange Admin here. From a server perspective that is the only answer. Microsoft has to update the Exchange software to allow that as a security option. Currently you can only choose PIN, Password, or certificate.

From an app side it would have to be one that ignores those settings which for the app provider is a good way to get their app blocked by corporate IT. I don't know of a good one that ignores the security.

Another option on the IT side is Mobile management software. I don't know of one that currently supports it, but Mobile Iron has told me they plan to add fingerprint security as an option.

 

[altjx]

Exchange Admin here. From a server perspective that is the only answer. Microsoft has to update the Exchange software to allow that as a security option. Currently you can only choose PIN, Password, or certificate.

From an app side it would have to be one that ignores those settings which for the app provider is a good way to get their app blocked by corporate IT. I don't know of a good one that ignores the security.

Another option on the IT side is Mobile management software. I don't know of one that currently supports it, but Mobile Iron has told me they plan to add fingerprint security as an option.

Hey Nicholb,

Thanks for your response. Do you know if Exchange receives any information pertaining to the devices that the Exchange accounts are connected to? Like, would they know that there's an app I'm using which is avoiding features?

Just asking because I'm curious to know if things are reported back to Exchange about my device automatically, or if it's only that Exchange admins can manually request this type of information.

I'd be completely fine with taking the risk if there's no red alarms that would go off. Kind of surprising that Exchange doesn't support this type of authentication just yet.

 

[nicholb]

If they are using straight Exchange it most likely will not. Exchange sends the security requirements to the app, the app then replies back that it enforced them. If the app lies, then Exchange assumes everything is AOK. If it tells the truth and says it it is not enforcing them, then email won't sync to the phone and an event is logged that the connection was denied. Most likely that will not be seen, or it will be ignored.

If they are using a Mobile Device Manager, then they can tell a whole lot more about what is happening on the device and you may set off some alerts.

 

[altjx]

If they are using straight Exchange it most likely will not. Exchange sends the security requirements to the app, the app then replies back that it enforced them. If the app lies, then Exchange assumes everything is AOK. If it tells the truth and says it it is not enforcing them, then email won't sync to the phone and an event is logged that the connection was denied. Most likely that will not be seen, or it will be ignored.

If they are using a Mobile Device Manager, then they can tell a whole lot more about what is happening on the device and you may set off some alerts.

Ahh. Gotcha. Thanks so much man!