Allow Specific Microsoft Office 365 Links in Okta Only When on the Network

This article describes how to allow access to specific Microsoft Office 365 links (for example, Yammer) only when on the network.

• Microsoft Office 365 (O365)
• App sign-on policy
• Use case: Only allow specific Office 365 link(s) access while on the network, and allow the other Office 365 links to be accessible anywhere
• Okta Identity Engine (OIE)
• Okta Classic Engine

This solution only works for IDP-initiated login. Create a bookmark app for Yammer and configure an app-level sign-on policy that grants access to the network only. Steps to create a bookmark app: 

1. Navigate to the Office 365 integration > General tab.
2. Copy the App embed link for the app that should be configured, for example, Yammer <YammerURL>.
3. Create a bookmark app from Applications > Add application > search Bookmark app > enter the URL of the app: <YammerURL>.
4. Assign the bookmark app to Office 365 users.
5. Go to the Sign on tab > Add a rule to allow access to the network.  
6. On the original Office 365 app > General tab > uncheck Yammer to hide the chiclets for users.