{"id":237,"date":"2023-04-27T11:27:01","date_gmt":"2023-04-27T09:27:01","guid":{"rendered":"http:\/\/virtualnomad.nl\/?p=237"},"modified":"2023-04-17T14:05:48","modified_gmt":"2023-04-17T12:05:48","slug":"intune-mam-a-guide-for-ios-android","status":"publish","type":"post","link":"https:\/\/virtualnomad.nl\/?p=237","title":{"rendered":"Intune MAM: A Guide for iOS\/Android"},"content":{"rendered":"\n

Intune has got your back when it comes to securing your mobile apps on iOS and Android devices. With its App protection policies feature, Intune Mobile Application Management (MAM) ensures that your corporate data is safe and sound. This protection is applicable for all supported apps (from partners and Microsoft) on mobile devices that are either managed (Intune MDM Enrolled) or unmanaged (Without Enrollment). The Intune MAM takes care of the latter and makes sure your Bring Your Own Devices (BYOD) stay secure without the need for full device management (Intune MDM or third-party).<\/p>\n\n\n\n

The Intune MAM is like a superhero that specializes in app-level protection, allowing sandboxing and controlling where your corporate data can be pasted. And if that wasn’t enough, with the Intune MAM combined with Azure AD Conditional Access, you get the extra perk of enforcing checks for the App protection policy on a mobile device for supported apps. So if the protection policy is not available, access to the cloud app will be denied right after the user authenticates.<\/p>\n\n\n\n

What do we need ?<\/strong><\/p>\n\n\n\n

If you’re diving into the world of Intune, there are a few things you need to know about supported operating systems. For starters, make sure you’re running at least the minimum OS version<\/a> required.<\/p>\n\n\n\n

If you’re using an unmanaged device, aka BYOD, you’ll need Microsoft Authenticator on your iOS and Microsoft Company Portal on your Android. Don’t worry, they’re your new best friends.<\/p>\n\n\n\n

Next up, you’ll want to check out Intune Data Protection Framework, which offers App Protection Policies. Want to know more about importing JSON templates with recommended settings? Check out my other blog<\/a> for all the juicy details.<\/p>\n\n\n\n

Don’t forget about Intune MAM protected apps. There’s a whole list of supported apps<\/a> with the Microsoft Intune App SDK embedded, so you can rest easy knowing your apps are secure.<\/p>\n\n\n\n

And last but not least, Conditional Access (CA) policy. This requires an Azure AD Premium P1 license (part of EMS E3 \/ E5 bundle). To give you an idea, you can set an example policy<\/a> that requires approved client apps or app protection policy. Now that’s what we call keeping it conditional.<\/p>\n\n\n\n

Let’s dive into the exciting world of configuring App protection policies! Don’t worry, we’ll make it easy for you.<\/strong><\/p>\n\n\n\n

First things first, we recommend importing JSON templates files with best-practice policy settings. You can choose between three levels of data protection: Basic, Enhanced, and High. For unmanaged devices in a business environment, we suggest going with Level 2 (Enhanced) with some customized settings and rename it.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Now, when assigning your App protection policy, you have a couple of options. You can target all device types or just unmanaged ones. For the latter, you can assign the policy to all apps or only the core Microsoft ones. In our case, we assign the policy to the BYOD MAM group of privileged users.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

For Managed device types, you can configure a second policy with fewer restrictions since there should be other MDM security policies and profiles in place.<\/p>\n\n\n\n

Next up, let’s talk about Conditional Access<\/strong>.<\/p>\n\n\n\n

This feature allows you to require a check for an App protection policy to be present on the client app before access is provided to selected cloud apps. To register a mobile device in Azure AD, you’ll need a broker app. For iOS, we recommend the Microsoft Authenticator, and for Android, the Microsoft Company Portal.<\/p>\n\n\n\n

When creating a Conditional Access policy, you can set the cloud app condition to all apps and the device platforms to iOS and Android. You can also choose to require either an app protection policy or an approved client app.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

The user experience is straightforward. Once they download the Microsoft Outlook app on their unmanaged iPhone and sign in with corporate credentials, they’ll be redirected to the App Store to download the Microsoft Authenticator (if they don’t already have it). The broker app will start the Azure AD registration process, creating a device record in Azure AD.<\/p>\n\n\n\n

\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n<\/figure>\n\n\n\n

Finally, make sure your App protection policies are applied; otherwise, access will be blocked. And remember, the user needs to set up a PIN for app access, which is shared between other apps from the same publisher (Outlook, Teams, Edge, etc.). With all these security measures in place, your corporate data is safe and sound!<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Intune has got your back when it comes to securing your mobile apps on iOS and Android devices. With its App protection policies feature, Intune Mobile Application Management (MAM) ensures that your corporate data is safe and sound. This protection is applicable for all supported apps (from partners and Microsoft) on mobile devices that are…<\/p>\n","protected":false},"author":1,"featured_media":253,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[4],"tags":[7,9],"class_list":["post-237","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-office-365","tag-o365","tag-security"],"yoast_head":"\nIntune MAM: A Guide for iOS\/Android - Virtual Nomad<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/virtualnomad.nl\/?p=237\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Intune MAM: A Guide for iOS\/Android - Virtual Nomad\" \/>\n<meta property=\"og:description\" content=\"Intune has got your back when it comes to securing your mobile apps on iOS and Android devices. With its App protection policies feature, Intune Mobile Application Management (MAM) ensures that your corporate data is safe and sound. This protection is applicable for all supported apps (from partners and Microsoft) on mobile devices that are...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/virtualnomad.nl\/?p=237\" \/>\n<meta property=\"og:site_name\" content=\"Virtual Nomad\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-27T09:27:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/04\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2000\" \/>\n\t<meta property=\"og:image:height\" content=\"2000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Arno Geboers\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Arno Geboers\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237\"},\"author\":{\"name\":\"Arno Geboers\",\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/#\\\/schema\\\/person\\\/3c08ee70c43dfd351fe038a7f6038d3b\"},\"headline\":\"Intune MAM: A Guide for iOS\\\/Android\",\"datePublished\":\"2023-04-27T09:27:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237\"},\"wordCount\":743,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/#\\\/schema\\\/person\\\/3c08ee70c43dfd351fe038a7f6038d3b\"},\"image\":{\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/virtualnomad.nl\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp\",\"keywords\":[\"O365\",\"Security\"],\"articleSection\":[\"Office 365\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/virtualnomad.nl\\\/?p=237#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237\",\"url\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237\",\"name\":\"Intune MAM: A Guide for iOS\\\/Android - Virtual Nomad\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/virtualnomad.nl\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp\",\"datePublished\":\"2023-04-27T09:27:01+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/virtualnomad.nl\\\/?p=237\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237#primaryimage\",\"url\":\"https:\\\/\\\/virtualnomad.nl\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp\",\"contentUrl\":\"https:\\\/\\\/virtualnomad.nl\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp\",\"width\":2000,\"height\":2000},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/?p=237#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/virtualnomad.nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Intune MAM: A Guide for iOS\\\/Android\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/#website\",\"url\":\"https:\\\/\\\/virtualnomad.nl\\\/\",\"name\":\"Virtual Nomad\",\"description\":\"a blog about the knowledge journey in Office 365 and Azure\",\"publisher\":{\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/#\\\/schema\\\/person\\\/3c08ee70c43dfd351fe038a7f6038d3b\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/virtualnomad.nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/#\\\/schema\\\/person\\\/3c08ee70c43dfd351fe038a7f6038d3b\",\"name\":\"Arno Geboers\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/cropped-cropped-AdobeStock_225103676-min.jpg\",\"url\":\"https:\\\/\\\/virtualnomad.nl\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/cropped-cropped-AdobeStock_225103676-min.jpg\",\"contentUrl\":\"https:\\\/\\\/virtualnomad.nl\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/cropped-cropped-AdobeStock_225103676-min.jpg\",\"width\":239,\"height\":178,\"caption\":\"Arno Geboers\"},\"logo\":{\"@id\":\"https:\\\/\\\/virtualnomad.nl\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/cropped-cropped-AdobeStock_225103676-min.jpg\"},\"sameAs\":[\"http:\\\/\\\/virtualnomad.nl\"],\"url\":\"https:\\\/\\\/virtualnomad.nl\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Intune MAM: A Guide for iOS\/Android - Virtual Nomad","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/virtualnomad.nl\/?p=237","og_locale":"en_US","og_type":"article","og_title":"Intune MAM: A Guide for iOS\/Android - Virtual Nomad","og_description":"Intune has got your back when it comes to securing your mobile apps on iOS and Android devices. With its App protection policies feature, Intune Mobile Application Management (MAM) ensures that your corporate data is safe and sound. This protection is applicable for all supported apps (from partners and Microsoft) on mobile devices that are...","og_url":"https:\/\/virtualnomad.nl\/?p=237","og_site_name":"Virtual Nomad","article_published_time":"2023-04-27T09:27:01+00:00","og_image":[{"width":2000,"height":2000,"url":"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/04\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp","type":"image\/webp"}],"author":"Arno Geboers","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Arno Geboers","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/virtualnomad.nl\/?p=237#article","isPartOf":{"@id":"https:\/\/virtualnomad.nl\/?p=237"},"author":{"name":"Arno Geboers","@id":"https:\/\/virtualnomad.nl\/#\/schema\/person\/3c08ee70c43dfd351fe038a7f6038d3b"},"headline":"Intune MAM: A Guide for iOS\/Android","datePublished":"2023-04-27T09:27:01+00:00","mainEntityOfPage":{"@id":"https:\/\/virtualnomad.nl\/?p=237"},"wordCount":743,"commentCount":0,"publisher":{"@id":"https:\/\/virtualnomad.nl\/#\/schema\/person\/3c08ee70c43dfd351fe038a7f6038d3b"},"image":{"@id":"https:\/\/virtualnomad.nl\/?p=237#primaryimage"},"thumbnailUrl":"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/04\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp","keywords":["O365","Security"],"articleSection":["Office 365"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/virtualnomad.nl\/?p=237#respond"]}]},{"@type":"WebPage","@id":"https:\/\/virtualnomad.nl\/?p=237","url":"https:\/\/virtualnomad.nl\/?p=237","name":"Intune MAM: A Guide for iOS\/Android - Virtual Nomad","isPartOf":{"@id":"https:\/\/virtualnomad.nl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/virtualnomad.nl\/?p=237#primaryimage"},"image":{"@id":"https:\/\/virtualnomad.nl\/?p=237#primaryimage"},"thumbnailUrl":"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/04\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp","datePublished":"2023-04-27T09:27:01+00:00","breadcrumb":{"@id":"https:\/\/virtualnomad.nl\/?p=237#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/virtualnomad.nl\/?p=237"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/virtualnomad.nl\/?p=237#primaryimage","url":"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/04\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp","contentUrl":"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/04\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp","width":2000,"height":2000},{"@type":"BreadcrumbList","@id":"https:\/\/virtualnomad.nl\/?p=237#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/virtualnomad.nl\/"},{"@type":"ListItem","position":2,"name":"Intune MAM: A Guide for iOS\/Android"}]},{"@type":"WebSite","@id":"https:\/\/virtualnomad.nl\/#website","url":"https:\/\/virtualnomad.nl\/","name":"Virtual Nomad","description":"a blog about the knowledge journey in Office 365 and Azure","publisher":{"@id":"https:\/\/virtualnomad.nl\/#\/schema\/person\/3c08ee70c43dfd351fe038a7f6038d3b"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/virtualnomad.nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/virtualnomad.nl\/#\/schema\/person\/3c08ee70c43dfd351fe038a7f6038d3b","name":"Arno Geboers","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/03\/cropped-cropped-AdobeStock_225103676-min.jpg","url":"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/03\/cropped-cropped-AdobeStock_225103676-min.jpg","contentUrl":"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/03\/cropped-cropped-AdobeStock_225103676-min.jpg","width":239,"height":178,"caption":"Arno Geboers"},"logo":{"@id":"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/03\/cropped-cropped-AdobeStock_225103676-min.jpg"},"sameAs":["http:\/\/virtualnomad.nl"],"url":"https:\/\/virtualnomad.nl\/?author=1"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/virtualnomad.nl\/wp-content\/uploads\/2023\/04\/byod-word-concepts-banner-bring-your-own-device-using-personal-gadgets-workplace-presentation-website-isolated-lettering-typography-idea-with-linear-icons-vector-outline-illustration_106317-8774.webp","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/virtualnomad.nl\/index.php?rest_route=\/wp\/v2\/posts\/237","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualnomad.nl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualnomad.nl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualnomad.nl\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualnomad.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=237"}],"version-history":[{"count":0,"href":"https:\/\/virtualnomad.nl\/index.php?rest_route=\/wp\/v2\/posts\/237\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/virtualnomad.nl\/index.php?rest_route=\/wp\/v2\/media\/253"}],"wp:attachment":[{"href":"https:\/\/virtualnomad.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=237"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualnomad.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=237"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualnomad.nl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=237"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}