Mobile Device Application Management

LJMU are rolling out a Microsoft Application Protection Policy to protect its corporate data when any of the Microsoft Office 365 apps are accessed on a mobile device. This will include Outlook, Teams, OneDrive and any of the Office suite of applications.

The protection policy only applies to LJMU corporate Office 365 applications. No personal applications or data will be affected.

The Policy has been implemented to safeguard the University from the following:

1. Data being copied out of a corporate JMU application and into a private application. e.g. the content of an email being copied and then paste into a Facebook status or WhatsApp chat.
2. Corporate data being saved onto personal devices. All corporate data must remain in either OneDrive or SharePoint Online.
3. Corporate University emails being accessed via personal and third-party email applications such as those found on Apple or Android devices. 
4. To enforce Multi-factor authentication when accessing our accounts from a mobile device.

What this means

To access any LJMU corporate Office 365 applications from a mobile device you will have to pass a Multi-Factor Authentication prompt. We strongly recommend using the Microsoft Authenticator app (Instructions are below). If you’re already using Multi-Factor Authentication to access other LJMU services you may already have done this. If not please click on this link to configure your MFA settings.

Any access to your LJMU email or calendar will have to be done via the Microsoft Outlook app or if you are accessing them via the Outlook webpage you will need to use the Microsoft Edge browser to access the webpage. When using the Edge browser, you will have to log in to the browser using your username@ljmu.ac.uk credentials.

Third party mail and calendar apps such as Android and Apple will be blocked from accessing your LJMU email and calendar. On Android you can share your Outlook calendar with the Android calendar app. This is currently not supported on Apple devices.

When accessing any corporate Office 365 application via your mobile device you will now be required to enter a 6-digit PIN or use the devices' biometrics such as fingerprint or facial recognition to access the applications. If the application is left inactive for 180 minutes you will be asked again to authenticate again in order to continue to use those applications.

Documents and files produced in your corporate LJMU Microsoft applications e.g., the ones requiring your LJMU credentials to log in to can only be saved in your LJMU OneDrive account or an LJMU SharePoint Online site. Once saved you will not be able to copy any part of those files into other applications e.g., WhatsApp or another non-LJMU instance of Office 365. 

Once an email is sent from your LJMU email account again you will not be able to copy any part of that email into a non-corporate LJMU application.

Please note
This does not affect any non-LJMU corporate apps on your mobile device. Personal emails, a non-LJMU Office 365 application and local file storage are not affected. This as been enabled only when using an Office 365 application logged in with your LJMU credentials.

Apple set up

Installing Microsoft Authenticator on an Apple Device

When using Multi-Factor authentication you may already have installed Microsoft Authenticator.  If this is the case, you can ignore these steps and go straight to Opening my Apps on an Apple Device.

1. Open the Apple Store and search for Microsoft Authenticator.
2. Click Get as you would when downloading any app from the app store to start the download.
3. Once Downloaded click open