Restrict device access based on criteria

You can specify criteria to restrict which devices can access resources.

Steps

On the Issuance Criteria tab, in the Source list, select Adapter.
(Optional) Restrict access based on device ownership:
1. In the Attribute Name list, select Ownership.
2. In the Condition list, select not equal to.
3. In the Value field, enter one of the following letters:
  - C: For corporate-owned devices.
  - S: For corporate shared devices.
  - E: For employee-owned devices.
4. Click Add, and then click Done.
(Optional) Restrict access based on device operating system:
1. In the Attribute Name list, select OperatingSystem.
2. In the Condition list, select not equal to.
3. In the Value field, enter one of the following:
  - Apple
  - Android
4. Click Add, then Done.
(Optional) Restrict access based on device MDM policy compliance:
1. In the Attribute Name list, select ComplianceStatus.
2. In the Condition list, select equal to (case insensitive).
3. In the Value field, enter Compliant.
4. Click Add, then Done.
(Optional) Restrict access for compromised devices:
1. In the Attribute Name list, select CompromisedStatus.
2. In the Condition list, select not equal to.
3. In the Value field, enter True.
4. Click Add, then Done.
Click Done, then Next.