Serial number for dynamic group membership

[jjrodgers]

Is it possible to get serial number as part of usable attributes for dynamic device group membership rules?  We are trying to populate a test group for Apple iOS/iPadOS DEP devices prior to them actually being enrolled in order to have an "required" app installed.  The problem there is no other "DeviceID", that I can find anyway, available until it goes through the DEP pre-enrollment or full enrollment with Company Portal.  Our use case is that we want the Microsoft Authenticator app installed on our iOS DEP devices without users having to sign in to the Apple ID and prior to full enrollment with the Company Portal.  The only other method I can see working would be for Microsoft to do the same they can do with the Company Portal app and have Authenticator installed the same way.  Ultimately, we are trying to avoid users setting up their authenticator incorrectly (it is a long story that we worked with your identity support on) prior to launching Company Portal to complete Intune enrollment.  

[#2]

Hi @jjrodgers ,

It is not possible to use serialnumber for a dynamic rule, see the below possible properties.

As defined in the Microsoft documentation: 
Rules for dynamically populated groups membership - Azure AD | Microsoft Docs

But what i understand from your question is that you want to install the Microsoft Authenticator app without sign into the company portal, and you want to test this first on a test device. 

Good news, It is possible, but how? 

1. Purchase the authenticator app via Apple Business Manager (device license), but that is default  
Manage Apple volume-purchased apps - Microsoft Intune | Microsoft Docs

2. Sync app to the intune portal

3. Create a new DEP Profile (with different name but same settings) in the Intune portal and assign your test device to that profile. 

4. Create a dynamic group with the following rule syntax (device.enrollmentProfileName -eq "New DEP Profile")

5. Assign the new dynamic device group as required to the Microsoft Authenticator app

6. App will be installed on a device without login to the company portal. 

I hope this helps you with installing the Authenticator app without logon to the company portal.

If this fixed your problem. Please let me know and mark this as a solution.

Kind regards,

Rene