Releases: microsoftconnect/ms-intune-app-sdk-ios
21.5.1
This version is intended for applications compiled with Xcode 26. App developers should NOT integrate this version if compiling with Xcode 16 and should instead integrate the latest 20.x release.
What's New
- Fixed a potential launch-time crash in applications.
- Fixed some potential launch-time crashes in extensions.
21.5.0
This version is intended for applications compiled with Xcode 26. App developers should NOT integrate this version if compiling with Xcode 16 and should instead integrate the latest 20.x release.
What's New
- Performance improvements.
- Jailbreak detection improvements.
Bug Fixes
- Fixed thread checker warnings when calling setUIPolicyAccountId method variants.
- Fixed a potential address sanitizer crash.
- Fixed "unrecognized selector" crash in unmanaged MAUI applications.
- Fixed issue where the application window’s safe area insets could shrink when resuming from background on iPadOS.
- Fixed issue where some extensions would be unable to acquire tokens when MAM-CA was enabled.
- Fixed issue where managed files could not be shared from javascript code in WKWebViews.
- Fixed issue where the conditional launch blocking alert could be displayed even if policy was updated to pass checks since previous launch.
21.4.1
21.4.0
This version is intended for applications compiled with Xcode 26. App developers should NOT integrate this version if compiling with Xcode 16 and should instead integrate the latest 20.x release.
What's New
- Launch-time performance improvements for non-UIScene applications.
- Show a "retry" button instead of "Sign In" when user is blocked by offline grace period policy and the attempted check-in failed with a MSAL error other than "interaction required".
Bug Fixes
- Fixed accessibility issue in the diagnostic console UI.
21.3.0
This version is intended for applications compiled with Xcode 26. App developers should NOT integrate this version if compiling with Xcode 16 and should instead integrate the latest 20.x release.
What's New
- Explicitly block sharing encrypted data to known unmanaged share extensions with invalid NSExtensionActivationRules that cannot be filtered from the iOS share sheet when "Send Org data to other apps" is set to "Policy managed apps with Open-In/Share filtering".
- Migrate usage of deprecated iOS system APIs to modern equivalents.
- Jailbreak detection improvements.
- Launch-time performance improvements.
- Added specific NSErrors to IntuneMAMFileProtectionManager encryptFile/decryptFile.
- Added a new synchronous mdmEnrolledAccountIdFromCache API for fetching the MDM enrolled account ID plus a notification that informs when this value has changed:IntuneMAMMDMEnrolledAccountIdDidChangeNotification
Bug Fixes
- Fixed an issue where picture-in-picture windows created by the app would not dismiss.
- Fixed a potential crash when fetching the MAM service URL.
- Fixed issue where overlay used prevent screen capture during drag-and-drop could be misaligned.
- Fixed a potential crash when making a WKWebView full screen on iOS 26.1+
- Fixed an issue where "Reset APP Pin" shortcut option was skipped when Face Id is enabled.
- Fixed potential crash if multiple threads load an NSItemProvider simultaneously.
- Fixes for long-running "Require App Protection Policy" conditional access remediation flows.
- Fixed some localization issues.
20.9.2
This version is intended for applications compiled with Xcode 16. App developers should NOT integrate this version if compiling with Xcode 26.
What's New
- Explicitly block sharing encrypted data to known unmanaged share extensions with invalid NSExtensionActivationRules that cannot be filtered from the iOS share sheet when "Send Org data to other apps" is set to "Policy managed apps with Open-In/Share filtering".
- Migrate usage of deprecated iOS system APIs to modern equivalents.
Bug Fixes
- Fixed an issue where picture-in-picture windows created by the app would not dismiss.
- Fixed a potential crash when fetching the MAM service URL.
21.2.0
This version is intended for applications compiled with Xcode 26. App developers should NOT integrate this version if compiling with Xcode 16 and should instead integrate the latest 20.x release.
What's New
- Jailbreak detection improvements.
- Added a new isScreenCaptureAllowed API to the IntuneMAMPolicy class to allow apps to query whether screen capture is allowed by policy.
- Added support for a new HooksAlwaysEnabled config setting in the IntuneMAMSettings dictionary in the info.plist. This setting will make the SDK's hooks active even when the app is unmanaged, which avoids the need for a restart in the event of the app becoming managed.
Bug Fixes
- Fixed a potential widget extension crash.
- Fixed a potential crash when checking for internet availability.
- Fixed a potential deadlock during keychain initialization.
- Fixed potential infinite loop in share extensions.
- Fixed a potential infinite loop when the app is loading content in a WKWebview.
- Fixed a potential crash when inspecting attributes of a file.
20.9.0
This version is intended for applications compiled with Xcode 16. App developers should NOT integrate this version if compiling with Xcode 26.
What's New
- Jailbreak detection improvements.
- Added a new isScreenCaptureAllowed API to the IntuneMAMPolicy class to allow apps to query whether screen capture is allowed by policy.
- Added support for a new HooksAlwaysEnabled config setting in the IntuneMAMSettings dictionary in the info.plist. This setting will make the SDK's hooks active even when the app is unmanaged, which avoids the need for a restart in the event of the app becoming managed.
Bug Fixes
- Fixed a potential widget extension crash.
- Fixed a potential crash when checking for internet availability.
- Fixed a potential deadlock during keychain initialization.
- Fixed potential infinite loop in share extensions.
- Fixed a potential infinite loop when the app is loading content in a WKWebview.
- Fixed a potential crash when inspecting attributes of a file.
21.1.0
This version is intended for applications compiled with Xcode 26. App developers should NOT integrate this version if compiling with Xcode 16 and should instead integrate the latest 20.x release.
Note: The "Authenticate pointers" and "Enable Read-only Platform Memory" options shown when adding the new "Enhanced Security" Xcode 26 capability are currently unsupported. App developers should disable these options if adding this new capability.
What's New
- Minimum supported iOS version is now iOS 17.0. App developers should update their minimum deployment target to iOS 17.0 or above.
- Minimum supported MacOS version for the IntuneMAMConfigurator is now 12.0.
- Configuring a custom client ID and redirect URI is now required. See announcement #569 for more information.
- Added Intune web view policy and web view policy delegate support for the new SwiftUI web view.
- Block app access and close the app when unsupported "Enable Read-only Platform Memory" enhanced security setting is enabled.
Bug Fixes
- Fixed a launch-time crash on iOS 18 for apps compiled with Xcode 26.
20.8.0
IMPORTANT: This is a required security update. We request that all of our partners and customers plan to adopt this release (or a newer one) as soon as possible. Failing to upgrade by December 15th, 2025 will result in your application losing connectivity with the Intune service, which may prevent end users from accessing their data within your application.
This version is intended for applications compiled with Xcode 16. App developers should NOT integrate this version if compiling with Xcode 26.
What's New
- Prevent data transfer via new iOS26 "Use as Ringtone" action extension.
- Added support for new behavior on iOS 26 when calling openURL "file://" scheme URL.
- Blur UIDragPreview and UITargetedDragPreview when screen capture is blocked.
Bug Fixes
- Fixed a timing issue with screen capture protection in picture-in-picture mode.
- Fixed an issue where the incorrect context menu could be displayed within a WKWebView.
- Eliminated white area on right of screen which could appear behind modal presentations.
- Fixed issue where copied NSAtrributedString objects could not be pasted as plain text.
- Fixed issue where IntuneMAMDataProtectionManager unprotect APIs would return DataNotProtected instead of FailedToDecryptData when trying to decrypt data owned by an account which was unenrolled.