Home
%3CLINGO-SUB%20id%3D%22lingo-sub-339486%22%20slang%3D%22en-US%22%3EKnown%20issue%3A%20Third%20party%20keyboards%20are%20not%20blocked%20in%20iOS%20for%20personal%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-339486%22%20slang%3D%22en-US%22%3E%3CP%20style%3D%22line-height%3A%20150%25%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%23333333%3B%22%3EThe%20Intune%20App%20Protection%20(APP)%20policy%20for%20the%20iOS%20setting%20for%20%E2%80%9CThird%20party%20keyboards%E2%80%9D%20is%20designed%20to%20allow%20only%20built-in%20keyboards%20when%20accessing%20company%20data.%26nbsp%3BWhen%20this%20setting%20is%20set%20to%20%22Disable%22%2C%20the%20Intune%20APP%20SDK%20instructs%20the%20OS%20to%20not%20load%20keyboard%20extensions%2F%20third%20party%20keyboards%20while%20company%20data%20is%20actively%20being%20used%20in%20the%20app.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22line-height%3A%20150%25%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECurrently%2C%20if%20an%20application%20is%20launched%20with%20a%20company%20account%20or%20it%20has%20protected%20data%20being%20used%20actively%2C%20then%20the%20Intune%20APP%20SDK%20signals%20the%20OS%20to%20block%20keyboard%20extensions.%20Thus%20third%20party%20keyboards%20are%20correctly%20managed.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F78153iC7AF6F291EB8DDA5%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Daniel%20APP%20third%20party%20keyboard.JPG%22%20title%3D%22Daniel%20APP%20third%20party%20keyboard.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHowever%2C%20we%E2%80%99ve%20noticed%20an%20issue%20where%20keyboard%20extensions%20are%20not%20blocked%20in%20situations%20where%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3Ethe%20application%20is%20launched%20with%20a%20personal%20account%20or%20personal%20data%20is%20active%3C%2FLI%3E%0A%3CLI%3Ethe%20user%20switches%20to%20a%20personal%20account.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EIf%20a%20user%20switches%20to%20the%20company%20account%20or%20views%20company%20data%20subsequently%20in%20the%20application%2C%20the%20signal%20from%20the%20Intune%20App%20SDK%20to%20the%20OS%20to%20block%20the%20keyboard%20extensions%20is%20ignored.%20In%20such%20a%20situation%2C%20the%20application%20must%20be%20closed%20and%20relaunched%20from%20the%20company%20account.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20worked%20with%20Apple%20and%20they%20have%20acknowledged%20our%20feedback%20on%20the%20OS%20change%20but%20are%20not%20committing%20to%20an%20OS%20fix.%20Therefore%2C%20we%20are%20removing%20support%20for%20this%20feature%20due%20to%20the%20potential%20data%20protection%20concerns.%26nbsp%3B%20%3CSTRIKE%3Efor%20data%20are%20working%20with%20Apple%20to%20resolve%20this%20issue%20and%20we%E2%80%99ll%20keep%20you%20updated.%20In%20the%20meantime%2C%20if%20you%20have%20this%20setting%20enabled%2C%20we%20want%20you%20to%20be%20aware%20of%20the%20limitations%20listed%20above.%3C%2FSTRIKE%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E3%2F11%2F19%3A%20Updated%20support%20statement%20on%20this%20feature%3C%2FP%3E%0A%3CP%3E2%2F15%2F19%3A%20Screenshot%20updated%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-339486%22%20slang%3D%22en-US%22%3E%3CP%20style%3D%22line-height%3A%20150%25%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%23333333%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-339486%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eapp%20protection%20policies%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eknown%20issue%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357328%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20issue%3A%20Third%20party%20keyboards%20are%20not%20blocked%20in%20iOS%20for%20personal%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357328%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F291638%22%20target%3D%22_blank%22%3E%40David_Kosik_CEZ%3C%2FA%3E%20yes%20you're%20right%2C%20good%20catch!%20We've%20discovered%20this%20UI%20error%20too%20and%20we're%20already%20in%20the%20process%20of%20fixing%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357006%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20issue%3A%20Third%20party%20keyboards%20are%20not%20blocked%20in%20iOS%20for%20personal%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357006%22%20slang%3D%22en-US%22%3E%3CP%3EI%20think%20there%20is%20a%20typo%20in%20the%20info%20bubble%20text%20for%20this%20item%3A%3C%2FP%3E%3CP%3E%22If%20enabled%2C%20a%20third%20party%20keyboard%20%3CSTRONG%3Ecannot%3C%2FSTRONG%3E%20be%20used%20with%20policy-managed%20apps%22%3C%2FP%3E%3CP%3EIt%20contradicts%20what%20is%20written%20in%20the%20article%20above.%20It%20does%20not%20make%20sense%2C%20it%20should%20be%20the%20opposite.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-639150%22%20slang%3D%22en-US%22%3ERe%3A%20Known%20issue%3A%20Third%20party%20keyboards%20are%20not%20blocked%20in%20iOS%20for%20personal%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-639150%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F226779%22%20target%3D%22_blank%22%3E%40Intune%20Support%20Team%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3E%3CP%3E%3CSPAN%3EThe%20Intune%20App%20Protection%20(APP)%20policy%20for%20the%20iOS%20setting%20for%20%E2%80%9CThird%20party%20keyboards%E2%80%9D%20is%20designed%20to%20allow%20only%20built-in%20keyboards%20when%20accessing%20company%20data.%26nbsp%3BWhen%20this%20setting%20is%20set%20to%20%22Disable%22%2C%20the%20Intune%20APP%20SDK%20instructs%20the%20OS%20to%20not%20load%20keyboard%20extensions%2F%20third%20party%20keyboards%20while%20company%20data%20is%20actively%20being%20used%20in%20the%20app.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECurrently%2C%20if%20an%20application%20is%20launched%20with%20a%20company%20account%20or%20it%20has%20protected%20data%20being%20used%20actively%2C%20then%20the%20Intune%20APP%20SDK%20signals%20the%20OS%20to%20block%20keyboard%20extensions.%20Thus%20third%20party%20keyboards%20are%20correctly%20managed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F78153iC7AF6F291EB8DDA5%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Daniel%20APP%20third%20party%20keyboard.JPG%22%20title%3D%22Daniel%20APP%20third%20party%20keyboard.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20we%E2%80%99ve%20noticed%20an%20issue%20where%20keyboard%20extensions%20are%20not%20blocked%20in%20situations%20where%3A%3C%2FP%3E%3CUL%3E%3CLI%3Ethe%20application%20is%20launched%20with%20a%20personal%20account%20or%20personal%20data%20is%20active%3C%2FLI%3E%3CLI%3Ethe%20user%20switches%20to%20a%20personal%20account.%3C%2FLI%3E%3C%2FUL%3E%3CP%3EIf%20a%20user%20switches%20to%20the%20company%20account%20or%20views%20company%20data%20subsequently%20in%20the%20application%2C%20the%20signal%20from%20the%20Intune%20App%20SDK%20to%20the%20OS%20to%20block%20the%20keyboard%20extensions%20is%20ignored.%20In%20such%20a%20situation%2C%20the%20application%20must%20be%20closed%20and%20relaunched%20from%20the%20company%20account.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20worked%20with%20Apple%20and%20they%20have%20acknowledged%20our%20feedback%20on%20the%20OS%20change%20but%20are%20not%20committing%20to%20an%20OS%20fix.%20Therefore%2C%20we%20are%20removing%20support%20for%20this%20feature%20due%20to%20the%20potential%20data%20protection%20concerns.%26nbsp%3B%20%3CSTRIKE%3Efor%20data%20are%20working%20with%20Apple%20to%20resolve%20this%20issue%20and%20we%E2%80%99ll%20keep%20you%20updated.%20In%20the%20meantime%2C%20if%20you%20have%20this%20setting%20enabled%2C%20we%20want%20you%20to%20be%20aware%20of%20the%20limitations%20listed%20above.%3C%2FSTRIKE%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E3%2F11%2F19%3A%20Updated%20support%20statement%20on%20this%20feature%3C%2FP%3E%3CP%3E2%2F15%2F19%3A%20Screenshot%20updated%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%20I%20have%20been%20tasked%20to%20stand%20up%20our%20MDM%20using%20MS%20Intune%20and%20we%20have%20a%20requirement%20to%20Disable%20Allow%20Full%20access%20for%203rd%20party%20keyboards.%26nbsp%3B%20How%20did%20you%20get%20the%20option%20to%20disable%20Third%20Party%20Keyboards%3F%26nbsp%3B%20I%20don't%20see%20that%20in%20our%20Intune%20App%20Protection%20interface.%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E

The Intune App Protection (APP) policy for the iOS setting for “Third party keyboards” is designed to allow only built-in keyboards when accessing company data. When this setting is set to "Disable", the Intune APP SDK instructs the OS to not load keyboard extensions/ third party keyboards while company data is actively being used in the app. 

 

Currently, if an application is launched with a company account or it has protected data being used actively, then the Intune APP SDK signals the OS to block keyboard extensions. Thus third party keyboards are correctly managed.

 

Daniel APP third party keyboard.JPG

 

However, we’ve noticed an issue where keyboard extensions are not blocked in situations where:

  • the application is launched with a personal account or personal data is active
  • the user switches to a personal account.

If a user switches to the company account or views company data subsequently in the application, the signal from the Intune App SDK to the OS to block the keyboard extensions is ignored. In such a situation, the application must be closed and relaunched from the company account.

 

We worked with Apple and they have acknowledged our feedback on the OS change but are not committing to an OS fix. Therefore, we are removing support for this feature due to the potential data protection concerns.  for data are working with Apple to resolve this issue and we’ll keep you updated. In the meantime, if you have this setting enabled, we want you to be aware of the limitations listed above.

 

3/11/19: Updated support statement on this feature

2/15/19: Screenshot updated

3 Comments

I think there is a typo in the info bubble text for this item:

"If enabled, a third party keyboard cannot be used with policy-managed apps"

It contradicts what is written in the article above. It does not make sense, it should be the opposite.

@David_Kosik_CEZ yes you're right, good catch! We've discovered this UI error too and we're already in the process of fixing it.


@Intune Support Team wrote:

The Intune App Protection (APP) policy for the iOS setting for “Third party keyboards” is designed to allow only built-in keyboards when accessing company data. When this setting is set to "Disable", the Intune APP SDK instructs the OS to not load keyboard extensions/ third party keyboards while company data is actively being used in the app. 

 

Currently, if an application is launched with a company account or it has protected data being used actively, then the Intune APP SDK signals the OS to block keyboard extensions. Thus third party keyboards are correctly managed.

 

Daniel APP third party keyboard.JPG

 

However, we’ve noticed an issue where keyboard extensions are not blocked in situations where:

  • the application is launched with a personal account or personal data is active
  • the user switches to a personal account.

If a user switches to the company account or views company data subsequently in the application, the signal from the Intune App SDK to the OS to block the keyboard extensions is ignored. In such a situation, the application must be closed and relaunched from the company account.

 

We worked with Apple and they have acknowledged our feedback on the OS change but are not committing to an OS fix. Therefore, we are removing support for this feature due to the potential data protection concerns.  for data are working with Apple to resolve this issue and we’ll keep you updated. In the meantime, if you have this setting enabled, we want you to be aware of the limitations listed above.

 

3/11/19: Updated support statement on this feature

2/15/19: Screenshot updated

 

Hi, I have been tasked to stand up our MDM using MS Intune and we have a requirement to Disable Allow Full access for 3rd party keyboards.  How did you get the option to disable Third Party Keyboards?  I don't see that in our Intune App Protection interface.