Forum Discussion
AzureADSharedMode - Teams without PIN
I prepared in Intune profile for Samsung devices in kiosk mode with a multi-app setting. I added Teams, Outlook, Egde and Managed Home Screen as apps. In addition, I also created a configuration profile for the Managed Home Screen application in which I set that it is necessary to configure a PIN for the session. I also set the Require PIN code after returning from screen saver option.
Everything works great until the user leaves the Teams app on or someone calls the user logged into Teams. At this point, no PIN is needed to unlock the device. You can easily access Teams of the logged-in user. The user is asked for the session PIN only when he wants to switch to another app.
I didn't set screen lock in android settings because in my opinion it's pointless since the device is in shared mode.
Have you encountered anything like this? It poses a potential security risk if a logged-in user leaves the Teams app open, puts the phone down and walks away from it, and at that moment someone calls the phone and the person who picks it up without probelm gets access to the logged-in user's teams.
1 Reply
Hi, yes, this is fairly common behavior in Kiosk mode with devices set to shared mode. Essentially, if the user remains in Teams, the kiosk session doesn’t trigger the PIN because there’s no “app switch” or return from the screen saver, allowing free access to the open app.
A few suggestions you might try:
-Reduce inactivity time before the screen saver or PIN lock kicks in. That way, if the user leaves the device unattended, it locks more quickly.
-Enable a system-level lock screen in addition to the session PIN, although this can be less convenient in shared mode. Sometimes it’s the only way to truly force a lock when the user isn’t present.Unfortunately, there’s no “perfect” way to enforce a PIN prompt when the user remains in the same app in kiosk mode. If security is a top priority, combining multiple layers (e.g., a strict screen saver or system lock) might be necessary.
