Microsoft 365 Ipad

30-04-2021 admin

Download Office 365 Desktop App
Office 365 For Ipad Pro
Microsoft 365 Fo Ipad
Microsoft 365 Ipad Download
Microsoft 365 App For Ipad

-->

Ready to move seamlessly between your devices? We'll help you install Office 365 on your iPad or iPhone. Let's get started! For more help, visit https://supp.

Download Office 365 Desktop App

Note: If you're using Microsoft 365, you should stay signed in so that Office stays activated.If you sign out, Office will prompt you to sign back in. To learn more, see What happens when you sign out of Office.
Microsoft Surface Pro 7 with optional type cover. The Microsoft Surface Pro 7 is a tablet computer that rivals the iPad for portability and ease of use.

Office 365 For Ipad Pro

Note

Office 365 ProPlus is being renamed to Microsoft 365 Apps for enterprise. For more information about this change, read this blog post.

Symptoms

Federated users on Apple iOS devices that have valid user certificates discover that they can't perform Certificate-Based Authentication (CBA) against Azure AD. However, federated users on Android and Windows devices can successfully authenticate by using CBA. The same iOS users encounter no issues when they authenticate by using their user name and password.

Here's the typical experience for iOS users who can't authenticate when they sign in to ADAL-enabled Office applications on iOS:

The user walks through the Office app setup experience. At the 'Office365' sign-in page, the user clicks Sign-in.
The ADAL Sign-in page appears, on which the user enters their federated email address and then clicks Next.
The ADAL Sign-in process hangs at a blank page until it times out and returns a 'There is a problem with your account. Try again later' error. This page includes the option to tap OK.
If the user taps OK, they sit at the same blank Sign-in page with the option at the top to tap Back.
Tapping Backreturns the user to the ADAL Sign-in page, where the process starts all over: the user is prompted to enter their federated email address and then click Next.
Tapping OK returns to a blank Sign-in screen, where the user can enter their UserPrincipalName and repeat the process.

To eliminate Office applications as a factor, we recommend that federated users in an iOS environment test certificate-based authentication in the Safari browser by following the steps in 'More Information' section. The typical experience for iOS users who cannot authenticate against https://portal.office.com from a Safari browser goes as follows:

The user is not prompted as expected to approve the use of their user certificate after they click the Sign-in using an X.509 certificate link.
The federated user either sits at an unresponsive STS sign-in page or advances to the default STS sign-in page, where they are prompted as follows:
Select a certificate that you want to use for authentication. If you cancel the operation, please close your browser and try again.
Note If other authentication methods are enabled in AD FS, the user will also see a link stating 'Sign-in with other options.' If they click this, they return to the STS sign-in page.
Both experiences fail with the following error:
Safari could not open the page because the server stopped responding.

Cause

The certificate chain is incomplete because the issuing subordinate CA certificate is not retrieved by the device as expected when the MDM policy pushes just the Root certificate to the Apple device along with the SCEP profile.

Microsoft 365 Fo Ipad

The iOS device does not correctly acquire the Issuing CA's *.crt file, even though the AIA path on the user certificate has a valid URL that points to the Issuing subordinate CA's *.crt file.

Resolution