Enrolling iOS devices via InTune

Ian Feldenzer

First edition

This guide documents the process for enrolling iOS devices through the InTune Company Portal app. This process is required for getting access to Agrofresh company resources, as well as access to Office apps on your device. 
 
 
Prerequisites:
--iOS device; this must be on iOS 16 or newer, otherwise your device fails the compliance check.
 
--Microsoft authenticator needs to be installed before InTune setup
 --Intune Company portal needs to be installed. 
 --If a user reports they are unable to sign into their apps, begin by having them remove their old device profile that’s installed on their iphone. This can be achieved by having them go to Iphone Settings >> General >> VPN Device/ Management, then have them select the Agrofresh Profile and hit Remove/Uninstall.
Afterwards, have them remove and re-install Intune from the app store so you can work with a clean slate.   

--It is not required to remove/uninstall any office apps from the user’s device to re-enroll. Please refrain from going this route. This includes Authenticator if the user already has it. 
 
   1. Begin by installing Intune Company Portal from the App Store, if not on the phone already. Upon opening this for the first time, press the ‘sign in’ button to begin;
A screenshot of a phoneDescription automatically generated 2. Sign in with your Agrofresh Credentials, (UserName@Agrofresh.com, Network Password) and you will then be taken to this screen so that you can setup for InTune Compliance; From here, hit “Begin.”
A tablet with a screen onDescription automatically generated


 3. Your first requirement will be to install Microsoft Authenticator, with which Intune will prompt you to install from the app store as shown. (You can ignore this section if the user already has Authenticator set up with Agrofresh. The process will let you continue as such.)
A screen shot of a tabletDescription automatically generatedA screen shot of a tabletDescription automatically generated
 
              3a. Once this is installed, open it and go past the Privacy/App usage prompts (you won’t need these), and then on the sign in prompt, select “Add Work Or School Account.” Enter your Agrofresh Credentials to continue, and go through the prompts to finish this step. 
A screen shot of a tabletDescription automatically generatedA screen shot of a phoneDescription automatically generated
 
 4. Now that this is complete, head back to InTune Company Portal to continue. After you hit the “Continue” button, you’ll be prompted to accept some privacy conditions, then you’ll hit ‘Continue. :
A screen shot of a deviceDescription automatically generatedA screen shot of a deviceDescription automatically generated

 


 5. Next, we will be installing the company profile, which will be downloaded to the iOS device. You’ll be taken to another Agrofresh Sign in to enter credentials (or Authenticator if already installed), then it’ll prompt to download the device profile. Hit “Allow,” and then it’ll confirm the download completed. 
 A screen shot of a deviceDescription automatically generatedA screen shot of a deviceDescription automatically generated
 
6. Head back to Intune, from here you’ll now install the device profile. Hit Continue so it takes you to the instructions. Once there, swipe up/home button to head to the iPhone home screen (do not close out of the app) and head to iPhone Settings >> General >> VPN/Device Management , and select “Management Profile” under the download section. From there, hit “Install” on the top-right corner, you will be prompted to hit “Trust”/Verify, and then enter your device’s passcode. Give this a few minutes to complete and you’ll see it’s installed, as a “Managed Account.” 
A screen shot of a computerDescription automatically generatedA screenshot of a remote managementDescription automatically generated A screen shot of a computerDescription automatically generated


 7. Head back to the Intune Company Portal, where you were at the Install Profile instructions. Tap “Yes, I’ve installed the profile”, and the process will automate from there through the message below. Intune will then check the iphone such that it’s compliant to access company resources. 
A screen shot of a deviceDescription automatically generated 
 8. Assuming all goes well, you’ll get a prompt confirming your device has passed. Hit “Done” and you’ll be prompted to select the preset that fits the device in question; In most cases, unless otherwise, hit ‘Personal Owned – Work Profile’.
 
A screen shot of a computerDescription automatically generatedA close up of a listDescription automatically generated 
 9. You’ll then be sent to a complete company portal, in which you can install company specific instances of Microsoft products. If the user was unable to sign into their apps before, have them open it back up and sign into them if needed. Confirm with them that outlook/teams load and sign in completely.
A screenshot of a computerDescription automatically generated