Deprecating Conditional Email Access Feature

Scalefusion’s Conditional Email Access feature allowed IT Admins to enforce that the corporate email is accessed only from devices that are managed by Scalefusion. By ensuring that the devices are managed by Scalefusion, IT Admins can apply device or work profile level security & policy controls offered by Scalefusion.

This feature primarily offered control over Email service that used Exchange protocol for email services and expose either Powershell scripts or APIs to control the email access. Currently this is offered for the following providers,

1. Microsoft Online Exchange

2. Microsoft OnPrem Exchange

3. Zimbra Exchange Server

4. IceWarp Exchange based Email

In 2023, Scalefusion launched OneIdP a dedicated product offered as a part of Scalefusion 360 subscription that provides a holistic approach to conditional access that not only includes email services but the other business critical services that an employee has access to.

Over the last two years, OneIdP has gained lot of traction from our newer customers, who are using this solution to achieve Zero-Trust Application Access across their services like Microsoft 365, Google Workspace, Zoho, Salesforce, Github and so-on.

At Scalefusion, our goal is to offer products and solutions to our customers which are inline with the latest standards and practices and as OneIdP offers a standard approach of identity and access management by using the industry approved protocols of SAML and OIDC and offers better security controls to ensure that the right user has access to the right service on right device we have decided to deprecate the Conditional Email Access feature that caters to only email services that use Exchange protocol.

Please find additional information related to this announcement below,

When is the support for Conditional Email Access Deprecated?

The Conditional Email Access feature has been deprecated from 22nd Sept 2025.

What would this mean?

This indicates the following,

1. The option of Conditional Email Access is now moved to Utilities section

2. Accounts/Admins who have configured Conditional Email Access can continue to use the feature till the End of Life announcement or choose to migrate to OneIdP by upgrading their subscription to Scalefusion 360. However we strongly encourage customers to evaluate and migrate to OneIdP at the earliest.

3. Customers or IT Admins who are evaluating Scalefusion to achieve conditional access for email access are encouraged to try OneIdP, a unified and complete approach to zero-trust application access.

Planned End of Life of Conditional Email Access

Scalefusion plans to announce the end of life for Conditional Email Access by 31st Dec 2026.

Frequently Asked Questions

1. Why is the support for Conditional Email Access deprecated?

   1. Conditional Email Access uses legacy methods to provide this feature which requires IT Admins to share a service account with Scalefusion that is used to invoke the powershell scripts which blocks the mailbox access based on the device management state. It also does not offer extensive compliance based checks beyond the management state. Moreover this offering only works with the Email service and not other services.
      Scalefusion’s OneIdP offers a complete identity and access management solution, and allows IT Admins to implement conditional access based on management state and extended access policies that offers a zero-trust based access to all the major services.

2. If we have configured Conditional Email Access, will the feature stop working?

   1. No, the feature will not stop working as long as the setup pre-requisites are fulfilled and the configuration is not changed. It will continue to work the way it is as of today.

3. Can we try and evaluate OneIdP on a trial basis before choosing to upgrade to Scalefusion 360 plan?

   1. Yes. We perfectly understand that you would want to try OneIdP before you choose to upgrade your subscription. Please reach out to your account manager or support@scalefusion.com if you are interested in trying the OneIdP solution.

4. Will we be getting technical support for the Conditional Email Access feature?

   1. Yes, till the planned end of life of this feature, customers who have already configured Conditional Email Access as on 22nd Sept 2025 will continue to get support.

   2. Customers who are not using Conditional Email Access and have not configured it yet, will not be provided any technical support and are encouraged to try Scalefusion OneIdP.

5. What will happen if we don’t upgrade to OneIdP post the planned End of Life date?

   1. Scalefusion will not be able to provide any technical support in regards to the Conditional Email Access feature and will guide the customers to delete the configuration.

   2. Customers who have not configured CEA, will no longer see the option.

We can understand that this change may impact your operations and hence we have made sure that the feature is completely functional as per its current offering. We also believe that you as the customers/IT Admins would understand and expect that Scalefusion adopts the standard and scalable practices for any feature or offering as in this case we have done by providing you with a ore robust offering than ever before.

If you have any questions related to this announcement or want to understand more about Scalefusion’s OneIdP please feel free to reach out to support@scalefusion.com.