Configure Device enrollment with the Company Portal in Intune

In a previous blog post, I covered the various types of enrollment available for iOS/ipadOS devices in Intune. If you haven't read that post yet, I recommend checking it out to gain a better understanding of Different types of iOS/iPadOS Enrollment In Intune. The purpose of this blog is to explain how to configure Device enrollment with company portal enrollment type and the user experience.

I have written a blog that explains Web-Based Device Enrollment both enrollment types are almost similar but only differentiate the enrollment method, for this enrollment users need to download the company portal app from the iOS/iPadOS store before starting the enrollment.

This is the typical BYOD enrollment which provides a wide range of management for the admin to manage the device, by deploying device restriction, compliance policy, and management capabilities, there is no data separation between user data and corporate data both the data are saved in the same location or container

If there are no enrollment type set then iOS/iPadOS device use this type of enrollment as default

Table Of Content

1. Steps to ConfigureDevice Enrollment with Company Portal Enrollment Type.

2. Let's take a look at end-user experiences.

3. How to Remove the Management Profile

Prerequisites for Device enrollment with Company Portal.

• Set mobile device management (MDM) authority

• Get an Apple MDM Push certificate

• iOS/iPadOS devices running 4.0 and later.

Steps to ConfigureDevice Enrollment with Company Portal Enrollment Type.

Step 1: Log in to Microsoft Intune admin center https://intune.microsoft.com navigate to Devices and select iOS/iPadOS

Step 2: Select iOS/iPadOS enrollment and select enrollment types.

Step 3: Tap on Create Profile and select iOS/iPadOS to create an enrollment-type profile.

Step 4: Enter the name for the enrollment type as required and the description if needed ( for demonstration purposes I had only entered a name for the profile as it is mandatory ) and tap on Next to continue

Step 5: Select Device enrollment with the Company portal and tap Next

Step 6: Select a group or all users as required, in this example, I will be using a group, tap Select to add the group or users and tap Next to continue

Step 7: Verify the settings and select Create to complete the profile creation.

Now the Enrollment Type profile is created.

Let's take a look at end-user experiences.

Step 1: Download the Company Portal app from the App Store, open the app, and tap on Sign in

this will open the sign-in page enter your work account and password and complete MFA if required

Step 2: In the company portal tap on OK and tap Allow to enable notification and start Begin to continue the enrollment process.

Step 3: Navigate to the Settings app select Profile Download, tap Install on the install profile, input your device passcode tap on Done, and tap Install on the next two options tap on Trust to start profile installation, and tap Done once the profile installation completed.

Step 4: Tap on Continue to resume the enrollment process once completed device will check for all configurations and compliance check

You can verify the profile installation status by navigating to the General selecting VPN & Device Management  and tapping on Management Profile 

On the admin end, the admin can manage the entire device which will allow remote commands like Wipe, retire, etc...These types of enrollment give the ability to wipe the personal device ( which can be considered a potential risk ), but it depends on the organization to decide how the device and data need to be managed.

How to Remove the Management Profile

Users can remove the management profile by tapping the Remove Management Option, the user needs to provide the device passcode tap on Done, and tap on Remove all the applications and data associated which is almost the Retire option.

Users can even initiate the retirement of their respective device by tapping the Remove Device option from the Device menu in the Company Portal App

Conclusion

This blog post will provide you with a clear and concise set of instructions on how to enroll iOS/iPadOS devices using Device Enrollment with the Company Portal.