Conditional access for mobiles: Android and iOS

Hi everyone,

I am asking for support,

When I try to add a business account in a native application such as gmail on an unregistered cell phone, after specifying only the business email address and domain password = access is not possible (correct operation), I get the message that I need to download the Intune application and register the phone.

Please suggest how to block with conditional access (or otherwise) the ability to add a business email account by specifying in an application such as gmail: mail server, domain, username and password. After specifying these parameters, the business account is added correctly, mail also synchronizes. We are anxious to block access from unauthorized devices. The test phone is not registered with Intune. Conditional access rules for both platforms (Android and iOS) have been created. Specific user groups are included, target resources are Office 365 and Office 365 Exchange Online, conditions: client apps - all 4 included, authentication flows (preview) is device code flow and grants: 4 selected controls - Require multifactor authentication, Require device to be marked as compliant and Require approved client application.

In the sample pictures, the attempt is made on an iPhone.

Thanks in advance for all the answers
img1.jpg
img3.jpg