Shared iPad not enroll to Intune
Hi, We have a Conditional Access policy configured which says that access to cloud apps is granted only to devices that are enrolled to our intune. The policy works correctly with users devices. Devices that is not enrolled to intune has no access to cloud apps like Teams is it. I have a problem with shared ipad. We synchronize devices with ABM to our intune. In enrollment token I created a profile for shared ipad. In this profile, we configure option that the device name should be like xx-sharedipad-{{serial}}. The enrolment process itself is correct, the device is enroll to intune, the name is correct, the required applications are installed (Teams, Authenticator). All devices enroll with this profile is added do AAD dynamic group. When a new user sign in to the device, everything seems to be correct, the iPad settings show the name according to the template configured in the enrollment profile for the shared iPad. The problem starts when the user wants to sign in to Teams, the device does not successfully pass the conditional access policy stating that only devices added to our intune can access cloud apps. In the sign in logs in AAD, I see that user tried to sign in to Teams, but in the device tab there is a completely different, new device. The new device has a totally random name, it is not added to intune, it appears in AAD only as Azure AD registered. Have you encountered such a problem before?
iPads (10th Gen) not showing Azure AD login screen in Entra Shared Device Mode at boot up
Hi there, We manage a range of mobile devices in Intune, both Android and Apple, and to date we've achieved many efficiencies whilst increasing security! We are currently purchasing 80 x iPads (10th Generation iOS 17.2) which we want to run in shared device mode. The Microsoft Procedure is well documented here (Nov 23): https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fautomated-device-enrollment-shared-device-mode&data=05%7C02%7Cianhe%40glch.org.au%7Cc454c0ae930c405627a608dc073536d5%7C4c92b31cb897461888f65ee56d6eabfd%7C1%7C0%7C638393172339141191%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=aR23HB2MGXmvv30XpIjBGpP2ZnejPqCWyFPxjDubTDw%3D&reserved=0 According to the documentation, Microsoft Intune and Micrsoft Authenticator support the Apple iOS Microsoft Enterprise SSO plug-in that integrates with iPad shared device mode. The SSO aspects are working well once logged into the first App. However, I can't get the iPads to boot up at the login screen for users to enter their credentials (nor logout ready for another user). How can I find support for this issue? I can't find other technicians talking this issue and so I'm open to any suggestions. Ta, Ian Hearnes Ian_HearnesShared iPad for Business Complex Passcode
The restriction on Shared iPads for business that requires a Complex Passcode just to unlock the device is preventing us from being able to use this feature. It's such a terrible experience for our field workers who would be constantly having to type a complex alphanumeric code just to access their device vs a standard number pin. Is there any timeline on getting this complex passcode requirement reduced? Not sure where to post this request/suggestion now that User Voice is gone.
