Microsoft 365 apps on Samsung Android keep breaking — temporary fixes only, always comes back

Posted by aPieceOfMindShit@reddit | sysadmin | View on Reddit | 10 comments

We're an MSP dealing with a persistent issue across two separate customer tenants, both managed via Intune. One is MAM-only, the other is fully MDM-enrolled — different environments, same problem. Only Samsung devices.

Customer 1:

On the MAM side, users are getting blocked from Microsoft 365 apps with:

"App access blocked — your organization needs to confirm your device meets Google Play integrity check. This cannot be verified."

Customer 2: On the MDM side we're seeing Teams failing specifically. Both affect Samsung Android devices.

We've stripped everything back to rule out our configuration — removed all device configuration profiles, app protection policies, device compliance policies, and Conditional Access. We've also uninstalled and reinstalled the affected apps. Things work after each step, but the issue always comes back.

Two separate tenants, two different enrollment types, same type behaviour.

We're out of ideas on our end.

Has anyone seen this, and is there anything that actually sticks?