Microsoft Intune - iOS Device Enrollment

Set up iOS device access to your company resources

Enroll your iOS device with the Intune Company Portal app to gain secure access to your organization's email, files, and apps.

After your device is enrolled, it becomes managed. Your organization can assign policies and apps to the device through a mobile device management (MDM) provider, such as Intune.

To maintain access to work or school information from your device, you'll need to configure your device to match your organization's preferred settings. This article describes how to use Company Portal to enroll you device and maintain access requirements.

Prerequisites

• Device running iOS 11.0 and later.
• Install Company Portal app from App Store.
• Maintain a Wi-Fi connection until all steps are complete.
• Have access to Safari web browser on your device.

To learn more about enrollment, see What happens when I install the Company Portal app and enroll my device?

Enroll your iOS device

Instruction Video: Enroll your iOS Device in Microsoft Intune

**NOTE**

Pausing for more than a few minutes during enrollment might cause the Company Portal app to close or

end setup. If this happens, reopen the app and try again.

1. Open the Company Portal app and sign in with your work or school account. If you haven't installed the free app, install it from the App Store.

2. When prompted to receive Company Portal notifications, tap Allow. Company Portal uses notifications to alert you if, for example, your device settings need to be updated.

3. On the Set up access screen, select Begin.

   

4. The Select device and enrollment type screen appears and prompts for your device type.

   • Tap (Organization) owns this device if you received your device from your organization. Then skip to Secure entire device in this article to finish setup.
   • Tap I own this device if you're using a personal device that you brought from home. Then continue to the next step.

   If you don't see this screen, skip to Secure entire device to finish setup.

   

5. Choose how to protect the data on your device once it's enrolled.

   • Tap Secure work-related apps and data only to secure only the apps and data you access with your work account. Then go to Secure work-related apps and data.
   • (Not Common) Tap Secure entire device to secure all apps and data on the device. Then go to Secure entire device to finish setup.

   

Secure entire device

1. On the Device management and privacy screen, read through the list of device information your organization can and can't see. Then tap Continue.

Important

These next steps and screens will differ depending on your iOS version. Follow the steps for your iOS version.

2. Safari opens the Company Portal website on your device. When prompted to download the configuration profile, tap Allow. If you're on a device running:

   • iOS 12.2 and later: When the download is complete, tap Close. Then continue to step 3.
   • iOS 12.1 and earlier: When the download is complete, you are automatically redirected to the Settings app. Skip to step 4.

   If you accidentally tap Ignore, refresh the page. You'll be prompted to open the Company Portal app. Once you're there, tap Download again.

**NOTE**

You must install the management profile as described in the next steps within 8 minutes of downloading it. If you don't, the profile will be removed and you'll have to restart enrollment.

3. When prompted to open Company Portal, tap Open. Read through the information on the How to install Management Profile screen.

4. Go to the Settings app and tap Enroll in < organization name > or Profile Downloaded.

   

   If neither options appear, go to General > Profiles & Device Management> Management Profile. If you still don't see a management profile, you may need to download it again.

5. Tap Install.

6. Enter your device password. Then tap Install.

7. The next screen is a standard system warning about device management. To continue with installation, tap Install. If prompted to trust remote management, tap Trust.

8. After installation is complete, tap Done. To verify that the profile was installed, go to the Profiles & Device Management settings. You should see the profile listed under Mobile Device Management.

   

9. Return to the Company Portal app. Company Portal will begin to sync and set up your device. Company Portal might prompt you to update additional device settings. If it does, tap Continue.

10. You'll know that setup is complete when all items in the list show a green checkmark. Tap Done.

Secure work-related apps and data

1. The Download Microsoft Authenticator screen appears (if you already have Authenticator, you won't see this screen so skip to step 2).

   1. Tap Download from App Store.
   2. When the App Store opens, install the app.
   3. Return to Company Portal and tap Continue.

   After you install Microsoft Authenticator, you won't need to do anything else with the app. It just needs to be present on your device.

   

2. On the Device management and privacy screen, read through the list of device information your organization can and can't see. Then tap Continue.

Important

These next steps and screens will differ depending on your iOS version. Follow the steps for your iOS version.

3. Safari opens the Company Portal website on your device. When prompted to download the configuration profile, tap Allow. If you're on a device running:

   • iOS 12.2 and later: When the download is complete, tap Close. Then continue to step 4.
   • iOS 12.1 and earlier: When the download is complete, you are automatically redirected to the Settings app. Skip to step 5.

   If you accidentally tap Ignore, refresh the page. You'll be prompted to open the Company Portal app. From the app, you can tap Download again.

**NOTE**

You must install the management profile as described in the next steps within 8 minutes of downloading it. If you don't, the profile will be removed and you'll have to restart enrollment.

4. When prompted to open Company Portal, tap Open. Read through the information on the How to install Management Profile screen.

5. Go to the Settings app and tap Enroll in < organization name > or Profile Downloaded.

   

   If neither options appear, go to General > Profiles & Device Management> Management Profile. If you still don't see a management profile, you may need to download it again.

6. On the User Enrollment screen, tap Enroll My iPhone.

   

7. Enter the device password. Then tap Install.

8. On the Sign in screen, enter the password for your managed Apple ID. In most cases, these credentials will be the same ones you use to sign in to your work or school account, unless your organization provided you with a different set of credentials.

9. Tap Sign in.

10. A success message will appear on the screen briefly after the profile is installed. To verify that the profile is installed, go to the Profiles & Device Management settings. You should see the profile listed under Mobile Device Management.

    

11. Return to the Company Portal app. Company Portal will begin to sync and set up your device. Company Portal might prompt you to update additional device settings. If it does, tap Continue.

12. You'll know that setup is complete when all items in the list show a green checkmark. Tap Done.

**NOTE**

If you tried to access your work email in the Mail app, and received a prompt to to get your device managed, you're in the right place. Follow the instructions below, which will help you regain access to your email and other work resources on your iOS device.