Microsoft added the ability to allow Android devices to register in Azure Active Directory.  This also allows them to take advantage of SSO for apps that use Active Directory Auth Library to AD.  In the article is also states that policy support for all Azure AD connected apps is in the works which then allows IT to setup conditional access across all devices.

http://blogs.technet.com/b/ad/archive/2015/01/15/azure-authenticator-for-android-with-support-for-workplace-join.aspx