[IMPORTANT] Azure AD (adv) Auth & impacts based on recent Workplace App and Mac Client updates

[XMP_Admin]

If you are an administrator of a cloud company using Azure AD advance mode in conjunction with either the recently updated Mac Client or the Workplace App, it is required that they make updates to their Azure AD single tenant authentication app.  Your Azure administrator will need to make these changes to your tenant.

Required Changes: (Applies only to cloud companies configured to use Azure AD advanced mode AND which use the Mac Client or Workplace App)

• Add the following redirect URI values to your existing Azure AD advanced mode “Native Application” app in your Azure tenant:

Platform Type	URI
Mobile and desktop applications	msauth://com.xerox.mobileprint/9BxqDVzRN9lAhItcQB5WP7O8vc0=
IOS / MacOS	msauth.com.xerox.printportal://auth
IOS / macOS	msauth.com.xerox.xeroxworkplacecloudclient://auth

[Note: You do NOT need to update the “Web Application” app in your tenant].

Impacted Versions:

• Mac Client version 1.3.5 and later – introduced on June 12, 2023
• Workplace App (IOS and Android) version 6.0.2 – introduced on August 11, 2023

Details:

• Changes were added to the Mac Client and Workplace App (IOS and Android) to better support InTune management.  This included updating the MSAL authentication libraries from Microsoft.
• The modified client/apps makes use of new URIs, used to return the results of the Azure AD authentication request to Xerox Workplace Cloud.
• The Xerox Workplace Cloud multi-tenant app (used for simple mode) was already updated for these new URIs.
• If you are using Azure AD advanced mode, along with either the Mac Client or Workplace App, then it is required that you update your single tenant ‘Native Application’ app to add these additional URIs.