SAMSUNG MAIL & 365 Auth issue

[gilb]

When sign in 365 authentication on mobile with samsung mail application/
after reciving code and complete mfa getting error on device
unable to complete authorization as samsung phone mail application…

when checking on 365 admin center - under user - Sign ins logs
got under category Token Protection - Sign In Session
this: Unbound (statusCode: 1002)

How to fix this issue? from admin center?

[sbux2k]

I had someone reach out to me about this issue yesterday too. We changed them over to the official Microsoft Outlook app, and that worked fine.

[theitguy107]

I second the advice to use the default Outlook app. This really is the only thing you should be supporting moving forward to take full advantage of the improvements Microsoft is making to security in Microsoft 365.

[jeffbrubaker]

Is this on a newer Samsung device or older? I’m assuming it’s on a phone.
Have you checked to see if there is a newer version of the app available?

I agree with what theitguy107 says about using the Outlook app. But I am using the Samsung mail app on my S23+ phone and it works without any problems. I have to use it because Outlook doesn’t support the format of the audio file our voicemail systems sends out.

If your phone is connected to WiFi, disconnect and see if you can connect to your account.
Also, in your 365 Tenant, make sure you are allowing mobile devices.

[gilb]

I tried everything and yes with OUTLOOK app it will work.

Can u explain this error - I think it related to this:
when checking on 365 admin center - under user - Sign ins logs
got under category Token Protection - Sign In Session
this: Unbound (statusCode: 1002)

Thanks, Gil

[JakeZhang303]

The “Unbound (statusCode: 1002)” error indicates a problem with the token binding process.
Here are a few steps you can take to resolve this issue:

1. Ensure that your Conditional Access policies are not blocking the authentication. Sometimes, specific policies can interfere with the token binding process.
2. Make sure the Samsung email app is updated to the latest version. Outdated apps can sometimes cause compatibility issues.
3. If you have Multi-Factor Authentication (MFA) enabled, try creating an app password for the Samsung email app. This can sometimes bypass issues related to token binding.
4. Remove the Office 365 account from the Samsung email app and re-add it. During the setup, ensure you follow all prompts for permissions and MFA.
5. Ensure that the device is compliant with your organization’s policies. Non-compliant devices can sometimes face issues with token binding.