The Intune App Protection (APP) policy for the iOS setting for “Third party keyboards” is designed to allow only built-in keyboards when accessing company data. When this setting is set to "Disable", the Intune APP SDK instructs the OS to not load keyboard extensions/ third party keyboards while company data is actively being used in the app.
Currently, if an application is launched with a company account or it has protected data being used actively, then the Intune APP SDK signals the OS to block keyboard extensions. Thus third party keyboards are correctly managed.
However, we’ve noticed an issue where keyboard extensions are not blocked in situations where:
If a user switches to the company account or views company data subsequently in the application, the signal from the Intune App SDK to the OS to block the keyboard extensions is ignored. In such a situation, the application must be closed and relaunched from the company account.
We worked with Apple and they have acknowledged our feedback on the OS change but are not committing to an OS fix. Therefore, we are removing support for this feature due to the potential data protection concerns.
for data are working with Apple to resolve this issue and we’ll keep you updated. In the meantime, if you have this setting enabled, we want you to be aware of the limitations listed above.
3/11/19: Updated support statement on this feature
2/15/19: Screenshot updated
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.