Forum Discussion
Mobile Threat Defense for Entra Shared Device Mode
Hi All What are you guys using for Mobile Threat Defense on Entra Shared Device Mode? Info appreciated. SK
Hi Buddy
Many thanks for your quick and informative reply. As the Entra Shared devices are "userless" and logged into by multiple users, I assume that each logged on user must have a Defender for Endpoint license?
Stuart
Not quite, and in this specific Entra Shared Device Mode/userless scenario it’s even simpler:
- Microsoft Defender for Endpoint on Android isn’t supported on userless or shared devices, and the same applies on iOS (“user-less or shared devices” not supported). So licensing every user who signs in won’t make MDE work on those shared devices, because the scenario itself isn’t supported.
- In general (for supported scenarios), Defender for Endpoint Plan 2 is licensed per user, and each licensed user can have up to five concurrent onboarded devices. So yes, where MDE is supported and users are benefiting from it, the licensing model is typically “per user”, not “per shared device session.”
So for Shared Device Mode: you normally pick a third-party MTD that supports shared/userless usage and integrate its risk into Intune compliance + Conditional Access (rather than trying to force MDE licensing onto a model MDE mobile doesn’t support).