By: Anya Novicheva – Sr. Product Manager | Microsoft Intune
Expected in Q2 CY26, iOS/iPadOS and macOS automated device enrollment (ADE) profiles will move to a new infrastructure which enables ...
Updated Feb 26, 2026
Version 5.0
Blog Post
Hi, this kind of conflicts with another article https://learn.microsoft.com/en-us/mem/intune-service/enrollment/automated-device-enrollment-authentication#option-2-setup-assistant-with-modern-authenticationit is advised we should not send a separate app configuration policy to the Company Portal for iOS/iPadOS devices after enrolling with Setup Assistant with modern authentication. Doing so will result in an error (setup with Modern auth with user affinity method and CP is deployed as a required VPP app) . However, this new article New iOS/iPadOS ADE enrollment policies experience | Microsoft Community Hub is asking to deploy the app configuration policy if we are deploying the Company portal app (VPP) with Modern Auth and user affinity. Do I have this correct? Which one is applicable here? Can you please advise. Thanks.
AnyaNovicheva Can you answer this? So, when using ADE with Modern Authentication and installing Company Portal afterwards (pushed as normal App), is an App Configuration needed?
https://learn.microsoft.com/en-us/intune/intune-service/enrollment/automated-device-enrollment-authentication#automatically-install-company-portal-app: "When the user reaches the home screen, Intune automatically applies the correct app configuration policy to the device."
Apart from JIT, I assume, customers will still use Company Portal for offering available Apps, devices actions like sync and wipe.Also wondering about this. In addition, this article states that IntuneUDAUserlessDevice is needed for "ADE device enrolled without user affinity (also known as Device Staging)". When using "Setup Assistant with modern authentication" we are having an user affinity...
https://learn.microsoft.com/en-us/intune/intune-service/apps/app-configuration-policies-use-ios
