Skip to content

Latest commit

 

History

History
69 lines (54 loc) · 5.21 KB

device-enrollment-shared-ios.md

File metadata and controls

69 lines (54 loc) · 5.21 KB
Raw
title titleSuffix description keywords author ms.author manager ms.date ms.topic ms.service ms.subservice ms.localizationpriority ms.assetid ms.reviewer ms.suite search.appverid ms.custom ms.collection
Shared iOS and iPadOS devices
Microsoft Intune
Learn about Shared iOS and iPadOS devices.
Lenewsad
lanewsad
dougeby
08/17/2021
overview
microsoft-intune
enrollment
high
ems
MET150
tier2
M365-identity-device-management

Overview of shared device solutions for iOS/iPadOS

Shared devices are organization-owned multi-user devices. These devices can be special-purpose or multi-purpose as needed in each environment. Shared devices enable front-line workers in healthcare, hospitality, retail, manufacturing, and other industries to access critical applications and tools essential to their role in the organization. In education, shared devices are used as learning aids or test-taking devices in classrooms.

Microsoft Intune supports two types of shared device solutions for iOS and iPadOS:

Compare solutions

The following table captures the key differences between the two available shared devices solutions on iOS/iPadOS. Review this to select the most appropriate iOS/iPadOS shared device strategy for your organization.

Consideration Shared iPad Shared Device Mode
Supported device types iPad iPhone, iPod touch, iPad
Minimum device requirements iPadOS 13.4 or later with at least 32 GB of storage. iOS 13 or later, iPadOS 13 or later
Microsoft Entra federation with Apple Business or School Manager Required. This enables users to sign in using their Microsoft Entra username and password. Not required
Managed Apple ID Microsoft Entra federation automatically creates Managed Apple ID when user signs in on Shared iPad for the first time.

If Microsoft Entra federation isn't set up, Managed Apple IDs can be created manually in Apple Business or School Manager and shared with users for signing in.

 Not required
Device provisioning Shared iPad can be enabled on iPads enrolled using Automated Device Enrollment without user affinity. Shared Device Mode can be configured on devices enrolling using Automated Device Enrollment without user affinity. For more information, see Microsoft Entra shared device mode for iOS devices.
Temporary session without signing in Temporary sessions that don't require a Managed Apple ID or password are allowed by default. Temporary sessions can be allowed or blocked by Intune policy. For more information, see Shared iPad. Not applicable
Supported app types Device-licensed purchased or custom apps (VPP), line-of-business apps, web apps. Apps modified to support Shared Device Mode including MSAL integration. For more information, see Modify your iOS application to support shared device mode.
Policy and app assignment Device-assigned required apps and policies are supported. The same apps and policies apply to any user signing in on a Shared iPad.
Some device configuration policies can be user-assigned. For more information, see Configure settings for Shared iPads.		 Device-assigned required apps and policies are supported.
App Protection Policies.
Unsupported scenarios Conditional Access.*
App Protection Policies.
Intune Company Portal app.
Available apps.		 Intune Company Portal app.
Available apps.
Apps that don’t support Shared Device Mode.
User-assigned policies and apps.

* The following Conditional Access configurations are not supported with Shared iPad:

  • Granting Conditional Access conditions for a device that require an approved client app, require an app protection policy, require per-device terms of use, or require the device to be marked as compliant.
  • Conditional Access conditions that use filters for devices.

Recommended iOS/iPadOS shared device strategy

Shared iPad is the recommended shared device solution for Microsoft 365 on iPadOS. If you're planning your organization’s shared device strategy, we recommended that you choose iPadOS devices that meet the minimum requirements for Shared iPad (see section above). If your organization’s shared device strategy requires cellphone capabilities or includes iOS devices, Shared Device Mode is the recommended shared device solution on iOS. Review the differences between Shared iPad and Shared Device Mode to ensure that the recommendations above will fit your organization’s needs.

Next steps