Confluence Data Center iOS app displays the error "You can't get there from here" when used with Microsoft Intune and Entra ID
Platform Notice: Data Center - This article applies to Atlassian products on the Data Center platform.
Note that this knowledge base article was created for the Data Center version of the product. Data Center knowledge base articles for non-Data Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
When using the Confluence Data Center iOS app with Microsoft Intune and Entra ID and enforcing device compliance, users can't log in with the error: "You can't get there from here".
Environment
Confluence Data Center environment where iOS mobile devices are configured with Microsoft Intune and Entra ID with device compliance enforced, and use the Confluence Data Center mobile app to access Confluence.
Diagnosis
When logging into Confluence using Microsoft Entra ID as the SAML SSO IDP, the error: "You can't get there from here: You cannot access the resource from this browser on your device. You need to use Microsoft Edge" is displayed.
Cause
This error is not specific to the Confluence mobile app; it affects all iOS apps which use Safari as their embedded browser. Safari by default does not send the device compliance information to Entra, causing the compliance checks to fail.
Solution
While Intune and Entra are Microsoft products and so aren't specifically supported by Atlassian, several customers have found that deploying the Microsoft Enterprise SSO plugin for Apple devices resolved this problem. Microsoft's documentation for this plugin can be found at the links below:
- Microsoft Enterprise SSO plug-in for Apple devices
- Deploy the Microsoft Enterprise SSO plug-in for Apple Devices
Note: If you choose to enable SSO for specific apps using the AppAllowList option, you will need the bundle ID for the Confluence Data Center iOS app, which is com.atlassian.confluence.server.app.