It's common practice for a company to have a number of Microsoft Entra ID Policies set up, which set out a number of rules that need to be met before a user can interact with their internal systems.

When policies are set up they can cause issues with signing in via the RICOH Spaces mobile application, this is evident by the below message:

"You can't get there from here"

This message is misleading and doesn't actually tell the user how to resolve the issue. The steps below will guide you through fixing this issue.

Before explaining how to resolve this, let's explain why it happens. Two commonly used policies in the Conditional Access area are "Require Approved Client App" and "Require terms of use". Both of these policies cause issues during the login process and will contribute to causing the above error.

First you need to decide whether MFA is required for Authentication via the RICOH Spaces application, if it isn't then jump straight to Exclude From Policy steps, otherwise follow below:

A new custom policy for RICOH Spaces needs to be created:

1) Name it something you will remember. We recommend RICOH Spaces App.

2) Assign the RICOH Spaces App as a selected cloud app.

3) Configure MFA as an Access Control grant

You now want to ensure that any other policies don't apply when using the RICOH Spaces app, to do this you need to exclude RICOH Spaces from any policy with "All Cloud Apps" selected.

Once the above steps have been completed it is wise to test the policies to ensure the correct ones apply, to do this use the What If functionality in Microsoft Entra ID. With What If it is possible to specify a user, an app, and see what policies apply.

If you have followed the above steps to create a new policy, you should see only that one in this list. If not this list should be empty.

When working with the Policies it is wise to allow time between editing and testing. This allows for any policy changes to finish saving.

That's it! You are done! 🎉