Hi there, I recently replaced my iPhone, and I'm trying to recover my Microsoft Authenticator accounts on the new phone.  The issue I'm running into is that when I try to start the recovery, the app tells me that "Access to iCloud account denied.  Restrictions are due to your parental control or device management settings".

I've gone through the policy settings in Maas360 and as far as I can tell, everything iCloud related should be allowed.  Obviously, I'm missing something.

Is there a specific setting that I should be looking for?
thanks!
Mike

Hi Mike
It's quite possible the device has had the Activation Lock feature activated, which locks a device to a specific Apple ID. 
The control over Activation Lock in policy is found (in iOS policy) under Supervised settings, in Restrictions & Network > Restrictions section. 
If this is activated you probably need some more information about what you can do. 
https://support.apple.com/en-ie/HT201365
Because you can only control this in Supervised mode you would need to make sure the device is enrolled in Supervised mode so that such a control could be applied. 
Here is some more information about getting set up with Supervised mode: 
https://support.apple.com/en-ie/HT202837
https://www.ibm.com/docs/en/maas360?topic=settings-configuring-policy-supervised-ios-device
In addition the Activation Lock could be cleared following the instructions in the document below. 
https://www.ibm.com/docs/en/maas360?topic=network-manually-clearing-activation-lock-supervised-ios-devices
If this doesn't help and you can't get this resolved please contact our Support team for assistance. 
Best

Hi there, I recently replaced my iPhone, and I'm trying to recover my Microsoft Authenticator accounts on the new phone.  The issue I'm running into is that when I try to start the recovery, the app tells me that "Access to iCloud account denied.  Restrictions are due to your parental control or device management settings".

I've gone through the policy settings in Maas360 and as far as I can tell, everything iCloud related should be allowed.  Obviously, I'm missing something.

Is there a specific setting that I should be looking for?
thanks!
Mike

Hi Mike
It's quite possible the device has had the Activation Lock feature activated, which locks a device to a specific Apple ID. 
The control over Activation Lock in policy is found (in iOS policy) under Supervised settings, in Restrictions & Network > Restrictions section. 
If this is activated you probably need some more information about what you can do. 
https://support.apple.com/en-ie/HT201365
Because you can only control this in Supervised mode you would need to make sure the device is enrolled in Supervised mode so that such a control could be applied. 
Here is some more information about getting set up with Supervised mode: 
https://support.apple.com/en-ie/HT202837
https://www.ibm.com/docs/en/maas360?topic=settings-configuring-policy-supervised-ios-device
In addition the Activation Lock could be cleared following the instructions in the document below. 
https://www.ibm.com/docs/en/maas360?topic=network-manually-clearing-activation-lock-supervised-ios-devices
If this doesn't help and you can't get this resolved please contact our Support team for assistance. 
Best

Hi there, I recently replaced my iPhone, and I'm trying to recover my Microsoft Authenticator accounts on the new phone.  The issue I'm running into is that when I try to start the recovery, the app tells me that "Access to iCloud account denied.  Restrictions are due to your parental control or device management settings".

I've gone through the policy settings in Maas360 and as far as I can tell, everything iCloud related should be allowed.  Obviously, I'm missing something.

Is there a specific setting that I should be looking for?
thanks!
Mike