Support Tip: Keeping your Company Portal app up-to-date on Android devices

The Intune Company Portal app allows you to access corporate data, apps, and resources. It’s important to keep your app up to date with the latest version of Company Portal. We recently had a change in enrollment certificates which required a Company Portal update for some users, and after talking with a few customers who weren’t aware of why and how to keep the company portal updated, we thought it would be good to provide this support tip.

Here are a few reasons to keep your Company Portal updated:

• Prevent security risks that can occur on older OS versions
• Certificate expirations which could prevent access
• New features, bug fixes, or changes to the UI

How to keep your device updated

When using Android devices, it is up to you as a user to keep the app updated. There are two options to keeping your Company Portal updated:

1. Recommended: Turn on Auto-Updates within the Google Play store, this will ensure that you always have the latest version on your device.
2. Ensure your notifications are turned on for Google Play Store to let you know when your app needs to be updated. (Don’t delay after seeing the notification or you might forget!)

Note: You won’t see a prompt within the Company Portal app that an update is needed.

How to update automatically

If you choose to turn on auto-updates follow these steps:

1. Open Google Play store and select the Menu icon
2. Select Settings
3. Select Auto-update apps and choose one of the following:
   • Over any network. Data charges may apply
   • Over Wi-Fi only

Fig 1. Google Play Store Fig 2. Google Play Store Settings

Fig 3. Auto-update apps Fig 4. Auto-update apps options

If you choose to auto-update over Wi-Fi to save on possible data charges, see below on how to connect to Wi-Fi automatically.

How to update manually

If you decide to update manually by receiving Google Play notifications do the following:

1. Open Google Play store and select the Menu icon
2. Select My apps & games
3. Select the Intune Company Portal app to update (or select Update All)
   1. If prompted, review App Permissions, then select Accept to proceed with the app update

Google Play Store - Manually update apps

Set up your Wi-Fi to connect automatically

If your settings for updates are limited to Wi-Fi connections to prevent possible data usage, it’s helpful to set up your device to connect to Wi-Fi networks automatically:

1. Open your device's Settings menu

2. Select Network & Internet

3. Select Wi-Fi

4. Select Wi-Fi preferences

5. Turn on Connect to open networks

Android Settings Android - Network & internet settings

Android - Wi-Fi settings Android - Wi-Fi preferences

Administrative options for updating apps

Device restrictions

As an IT admin, you can also ensure your user has the latest Company Portal version by setting up device restrictions for users enrolled with fully managed, dedicated, and corporate-owned devices by following these steps:

1. Navigate to Devices > Android > Configuration policy
2. Click Create Profile

   1. Platform: Android Enterprise

   2. Profile: Select Device restrictions under Fully Managed, Dedicated, and Corporate-Owned Work Profile
      <<Screenshot>>

   3. Open Applications within the accordion
   4. Set App auto-updates: Devices check for app updates daily. Choose when automatic updates are installed:

      1. Not configured: Intune doesn't change or update this setting.

      2. User choice: The OS might default to this option. Users can set their preferences in the managed Google Play app.

      3. Never: Updates are never installed. This option isn't recommended.

      4. Wi-Fi only: Updates are installed only when the device is connected to a Wi-Fi network.

      5. Always: Updates are installed when they're available.

Android Enterprise - Device restriction profile

For more information on Device restrictions for Android Enterprise see this documentation. App auto-updates aren’t available for devices enrolled with Android device administrator or Android work profile.

Configure Conditional Launch

Another option as an IT admin is to configure a minimum Company Portal version within conditional launch settings to prevent users from accessing company resources if they need to update Company Portal. This can be configured by doing the following:

1. Navigate to Apps > App protection policy
2. Click Create policy and choose Android
3. Under Conditional Launch > Device conditions, select Min Company Portal version
   
   Android Enterprise - Device restriction profile settings
   
   
4. Once selected, insert a minimum Company Portal version to Value
5. Choose an action:

   1. Block access: Prevent users from accessing company resources until Company Portal is updated.

   2. Wipe data: The user account that is associated with the application is wiped from the device.

   3. Warn: This will let users know that they need to update the Company Portal.

Note: If you choose Block access, forcing an update could lead to unexpected data charges at the time of the update. Learn more about Android app protection policy settings in Microsoft Intune.

We hope this support tip is useful for your users. For more on updating the Company Portal on Android devices, see this documentation:

• Help end users understand Company Portal app messages
• Enroll your Android device
• Enroll your Android Work Profile device
• Configuring and troubleshooting Android enterprise devices in Microsoft Intune
• Managing Android devices where Google Mobile Services are not available

Let us know if you have any additional questions on this by replying back to this post or tagging @IntuneSuppTeam out on Twitter!