Forum Discussion
Shared / Shift Mobile Phone
Indeed Entra Shared Device Mode is a good option for iOS and Android devices. Test it well concerning SSO and especially for Sign-out scenario's, so if shift is over > user signs out > test what happens with the app (is the user signed out as well?). See some extra info here: https://learn.microsoft.com/en-us/entra/identity-platform/msal-shared-devices#build-applications-that-support-frontline-workers
For apps that completely support sign-out scenario's, for Android: https://learn.microsoft.com/en-us/entra/identity-platform/msal-android-shared-devices#microsoft-applications-that-support-shared-device-mode and for iOS: https://learn.microsoft.com/en-us/entra/msal/objc/shared-devices-ios#microsoft-applications-that-support-shared-device-mode
We have deployed this with a couple of customers in different scenario’s and works pretty well..
I only really need the Google Phone and Messaging app on these Shared Mobiles, so I have created a new enrollment profile (Dedicated / Entra Shared / Multi App), Dynamic group based on the new enrollment profile and then a Device Config / Restrictions profile also assigned to the Dynamic group.
Will test that and update.
Thanks again