Intune - iOS/iPadOS App Configuration Policies

[StephenPink]

Hi all,

 

Currently setting up Intune and playing with iOS/iPadOS devices. Have followed the recommended Microsoft guidance here: iOS/iPadOS security app configuration policies - Microsoft Intune | Microsoft Learn to lock all Microsoft apps to corporate accounts only, as well as the JIT/SSO setup here: Authentication methods for Apple automated device enrollment - Microsoft Intune | Microsoft Learn

 

However - whilst the SSO/app configuration bit is working perfectly for Teams, Word, PowerPoint, Excel (albeit sometimes a little slow to apply) - OneDrive just will not play ball, and still asks for a blank sign-in. Not sure how to even really troubleshoot?

 

Hoping someone's come across this before!

 

Cheers,

Stephen

[ITJAY2023]

Hey Stephen,

 

Did you ever get round to this?

 

What I would love to do is be able to get any student to pick up a shared iPad, login with there AppleID and have it so it automatically logs into all office products

[StephenPink]

Hey,

 

Not exactly! So targeting apps/policies to user groups or filters on all devices is quicker than dynamic device groups (due to the way Azure refreshes the dynamic device groups). That helped, but the SSO is still a bit hit and miss. The longer you wait after enrolling, the better it behaves!

 

The other problem I've got with the Managed Apple ID piece is that because that is the first thing to get signed into, prior to Teams being installed/signed in, it gives a double log in - once to check Intune enrollment/compliance, then again to actually sign in. That also doesn't trigger the SSO for the other Office apps...

 

So not as seamless or predictable as I'd like yet!

 

Cheers,

Stephen