Choosing the right Terms solution for your organization
Published Oct 30 2018 11:42 AM 49.2K Views
First published on TechNet on Oct 02, 2018
If you are an existing Intune customer, you may already be enforcing acceptance of your company terms using Intune’s Terms and Conditions feature. We are excited to provide you with a new option built upon Conditional Access that includes richer compliance controls. Azure Active Directory (Azure AD) has built their Terms of use feature to enable enforcement of company terms across Intune and other Microsoft services. With Azure AD, you have the flexibility of adding terms enforcement to your existing Conditional Access policies or creating new terms policies based on certain user flows. We’ve put together some FAQs that will help you understand this feature better.

What is required to use the new Azure AD Terms of use feature?

The new Terms of use feature requires an Azure AD Premium P1 subscription. This can be purchased as a standalone offering, or as part of Enterprise Mobility + Security or Microsoft 365 suites.

What are the main benefits when choosing Azure AD Terms of use?

Providing localized terms to end users
In Intune, admins can create multiple terms using localized text and then target those profiles to the groups of users that are thought to speak that language. The accuracy of the language shown will depend on how cleanly your user groups straddle spoken languages. In Azure AD, admins can create a single profile and attach multiple localized PDF files along with the designated language of each file. End users will then be shown the correct PDF based on the localization settings of their device. Devices in languages not configured with its own localized PDF will fall back to the language listed on top.

Adding branding and other images to company terms
Intune terms are text based and thus do not support adding company logos or other images. Azure AD terms render PDF files and thus have a much richer experience that allows for color, branding, images and hyperlink support.
Providing terms for non-enrollment scenarios
In Intune, terms are shown during device enrollment as well as inside the Company Portal for an already enrolled device. In Azure AD, you can choose to have your terms shown in other places and for more scenarios. Admins might still want a single variation of terms, but they wish to target it more widely to better catch their end users. Alternatively, some admins may choose to show different terms based on the application. For instance, admins may choose to target enrollment with specific terms relevant to their control of devices but target Office resources with a different set governing use of company resources. These Office relevant terms would then be prompted even for devices that never enroll. Because Azure AD terms sits on top of Conditional Access, you have the same level of flexibility in choosing which applications or resources will trigger the company terms.
Providing more granular compliance for acceptance of company terms
Certain regions need to separate terms and require unique acceptance of each. Azure AD has built support for this behavior. Some regions or industries require terms to be accepted on every device for the user or on every access of company resources. Azure AD is currently working to build these capabilities.

How does the user experience differ between Intune and Azure AD terms of Use?

As noted, Azure AD gives you the flexibility in determining exactly where you want company terms shown. The screenshot below shows the Intune Company Portal enrollment experience when targeted by Azure AD terms of use and Intune Terms and conditions.

Azure AD Terms of Use:

Intune Terms and Conditions:

How do I migrate my terms over?

Check out the Terms of Use documentation on how to set up your terms profiles. Keep in mind that Intune and Azure AD terms are utilizing different infrastructures. So, if you decide to create terms inside Azure AD, remember to turn off the terms in Intune unless you want users to see both! Also, remember that when you switch, your end users will see the newly created Azure AD terms even if the content has not changed from what you had shown during Intune enrollment. If this concerns you, you may decide to wait until the next time you would have otherwise needed to update your company terms.

Where can I find more information on Azure AD Terms of Use?

Video: What is Terms of Use in Azure Active Directory?

Documentation: Azure Active Directory Terms of Use Feature

What's in the future for Intune terms and conditions?

Intune terms and conditions are still an option for customers that do not need the richer functionality found in Azure AD. Azure AD terms of use will continue to evolve and customer requests will be primarily considered in that space. We hope these FAQs help you decide which Terms of Use solution you can use in your scenario.
Version history
Last update:
‎Dec 19 2023 01:21 PM
Updated by: