Enrolling an iOS Device in Intune
Before you begin
-
Install the Intune Company Portal app from the Apple App Store. The Company Portal app is used to enroll and manage your device, install work apps, and get IT support.
- Verify your Apple device is running iOS version 16.0 or above. For help determining the current iOS version, review this article from Apple.
What data is visible to my organization?
Your organization can NOT see your personal information when you enroll a device in Microsoft Intune. Enrolling your device makes certain information, such as device model and serial number, visible to IT.
Note: Personal apps and data aren't visible to your organization.
Enroll an iOS Device
- Download the Company Portal app from the Apple App Store.
- Open the Company Portal app, and sign in to the Company Portal app with your work or school account when prompted. Then click Begin.
- On the Set up your device screen, review the enrollment steps and information about what your organization can see and do on an enrolled device. Then select Continue. Then tap Continue again on the next screen.
- The Safari web browser opens the Intune Company Portal website. When prompted to, select Allow to download the Intune configuration profile for your device.
- Once the download completes, select Continue to open the Company Portal app to progress through the setup.
- Open the Settings app on your device and go to Profile Downloaded.
- If this option isn't available, go to General > VPN & Device Management.
- Tap Management Profile. Then tap Install.
- You might need to reenter your passcode. Then tap Install again.
- When prompted to, read the remote management warning. Tap Install again to continue. Then tap Trust.
- Wait while the management profile installs. Tap Done when installation is complete.
- Return to the Company Portal app and tap Continue.
- Wait a few minutes while your device is reviewed for compliance with Liberty Resource policies. Once this has completed, tap Doneto complete the device enrollment process.
- During the enrollment phase, it is normal for no compliance policies to be applied. Once enrollment is complete organization wide, IT will assign the appropriate compliance policies to staff devices. You may see messages which state your device is not able to access work resources. During this enrollment period, the lack of compliance policies will NOT impact your access to work resources on your mobile device.
- After enrollment, you might receive prompts from Company Portal to install required apps. Tap Install on the app prompts to install the apps.
- Your device might require a mobile threat defense app on your device, which monitors your work apps for threats and viruses. Tap Install to proceed with installation. If the app is a requirement and you skip installation, you might not be allowed to access work resources.
How to use Company Portal
Once your device has fully enrolled, go to the Company Portal app on your device where you can install apps which are approved for use in accessing Liberty Resources’ services (i.e., Email, Teams, SharePoint, etc.).
Under the Apps tab at the bottom of Company Portal, you will find a list of iOS applications that can be installed. These apps are pre-configured for use with your Liberty Resources’ account, with minimal setup.
Some apps, such as Microsoft Edge and Microsoft Defender are required applications, which are required for access to the Liberty Resources environment.
Removing Company Portal
If you no longer want to access your work apps on your personal device, you can remove your device enrollment at any time and add it back later if you change your mind. There are two options available to unenroll your device from Intune.
Option 1: Remove your mobile device via the Company Portal Self-Service website.
- Go to Company Portal Self-Service.
- Select Devices (if not defaulted there).
- Choose the mobile device you want to unenroll.
- Choose Remove.
Option 2: Remove the management profile locally on your device.
- Open Settings
- Navigate to General > VPN & Device Management
- Tap the Liberty Resources management profile
- Tap Remove Management
Note: Removing your device will delete all work apps and data, but personal apps and data remain untouched.
Additional information
- If you had Microsoft 365 apps (i.e., Outlook, Teams, etc.) installed prior to registering your phone in Intune you will no longer be able to access Liberty accounts through these apps. You can either uninstall these apps from your personal profile or if you use them with other accounts ensure you remove your Liberty account details.
- Attempting to access Liberty accounts via apps installed outside of Company Portal will result in the pop up asking you to download Company Portal. Only the applications downloaded through Company Portal are allowed to access Liberty accounts.
- Also, if you had your email set up in your native mail client you should now remove the account from there and access your email through the Outlook mobile app available in Company Portal. This app is available for installation in the Apple store and includes the KnowBe4 Phish Alert Button, where suspicious emails can be reported to IT for review.