This is why I love our industray. I get assigned an InTune managed iOS device project, having never managed any Apple device in InTune before. A few videos later from some fellow Aussies and I am ready to get into pilot testing a device :) I 'll have to work out the shared devices idiosyncrasies but that's really it. Thanks fellas.
As always, very informative video. Any way y'all could do one that goes over enrolling the device as a Microsoft Entra Shared Mode device? I'm so lost on how SSO works on it with multiple users. I've set it up to test, but I am not sure I'm doing it right and I haven't found much documentation or any good videos on it. The purpose I am trying to fulfill is to provide an iPad for a certain Team that will need to have one user using it when they are in the office as an alternative to using a laptop, but it is also going to be needed for other users to use for events where they may play music connected to a bluetooth speaker or have it setup to do surveys so they can hand it to people to fill out. We are a University in Texas, and this will be used for multiple purposes and multiple users. So, I didn't think doing Enroll with User Affinity was the way to go. Any videos you could do on this particular mode would be great! Thanks guys!
You guys are really helping me with migrating to Intune at work, I greatly appreciate it How do you create/generate managed Apple IDs? Also idk if you mentioned it and I missed it but can you force the user to sign in to Company Portal?
Thanks for the reboot! And don't forget, sometimes you need to click on top, sometimes you need to click the dots and infuriatingly sometimes you need to right click... (e.g. to remove a user form a shared iPad)
Awesome video - Would you mind to share which screen mirroring tool you are using? Maybe another detail that weren't mentioned in the video is that you can actually use a TAP in the setup assistant while getting the prompts, because if you have CA-policies deployed that enforce authenticator registration for the first time the setup wizard will freeze/keep spinning and doesn't support registration when using "Setup Assisstant with Modern auth/JIT". It seems like in order to bypass the "authenticator registration prompt" you need to add an "Authentication method" before hand like either "TAP" or "SMS/Voice call" to support it. However, if users has a second device they can easily complete the Auth app registration process in the setup assistant.
Hey Guys! I have a question regarding the screen sharing from the out of box experience. How were you able to record/achieve this? I'd like to create a video walk through/tutorial for my company when on-boarding new users and I'd love to create a video to give to new users instead of a long Word/PDF doc. This video was incredibly helpful so thank you so much for creating content like this.
We use a Blackmagic design atem mini, to capture the HDMI, with either a lightning to HDMI adaptor (you need to keep the firmware up to date on it, so can be inconsistent) or recently usb-c to HDMI with the iPhone 15 (heaps easier and works just out of the box as you'll see in some up coming videos)
The company portal variant isn't compatible with the latest iOS versions anymore. Microsoft has an article on this that company's should switch. Also missing the new JiT enrollment solution in this video 😊
thanks very much for the video. I have used this as a guide but not sure if I've missed something. When trying to install apps via company portal I get hit with the apps requesting apple ID to download. Is there something I can check to prevent this?
Looks nice, but how do you enforce the device/user to fully mdm enroll into Intune. People can skip that step and ignore CP and still use the phone and apps without it.
Thank you. Please update the video in Playlist and we’re is the video with Configure Supervisor to add iPhones in ABM that you don t have invoice or provider that can add them.
Is there any option to try ABM in demo lab without all that paperwork? Any option to try it without providing all that business information, numbers etc 😅
Awesome Video! Tough question here: Am I able to set up an iPhone with user affinity and register it to a user without entering a password during the enrollment process? This has been a requirement for a bunch of big corporations. Passwords are just bad when it comes to security and authenticating and I was wondering if it is possible to register an iPhone to a user without the user having to enter his M365 password. With VMware Workspace one you can enroll devices with a token that the user can generate himself in a self service portal. Is there a similar solution within Intune? Thanks in advance!
If your flying the passwordless flag the answer is yes, but it is configured in entra ID rather then Intune, as it controls the gate into the platform. You can force passwordless via conditional access policies on device registration
@@IntuneTraining Thanks for the Information! So password-less enrollment is possible. I did try it with TPA - Temporary Access Pass and it did work without any issues. We were originally trying to enroll an iPhone with Fido Keys (maybe even NFC capable once) but when enrolling an iPhon there is no option for Fido Key. So it seems like the iOS Platform is not capable of doing that. TPA is probably the best password-less option right? Best Regards and thx again!
i have installed apple configurator and trying to enroll devices to intune - i can see the devices in ABM but unable to enroll devices in intune- it shows it's ready to renroll. i made sure profile is assigned to device. later is reset deivce and it shows it controlled by my organisation but no apps are pushed like company portal etc. Can you please guide me what am i doing wrong. or do it have to install company portal manually
Hi I have a quick question everytime i try to sign in on company portal. after sign in i get an error contact company support there isn't a device setup for this account yet contact support to setup a device. Do you happen to kno wthe reason
@@IntuneTraining Thankyou for the reply i dont have any comditional access setup and the grace period is 7 days still the same issue i a facing Thank you
Yes. We were just talking about doing a video on this soon. Short answer is use Configurator on an iPhone. You have to wipe the device then you hold it next to the phone with Configurator and it will display a QR code to scan to enroll. Super simple. Search Apple docs for Apple Configurator iOS App for instructions.
@@IntuneTraining already figured it out myself ;) Working without any issues, other than having to wait the initial 30days where the user can reclaim the phone.
This is why I love our industray. I get assigned an InTune managed iOS device project, having never managed any Apple device in InTune before. A few videos later from some fellow Aussies and I am ready to get into pilot testing a device :) I 'll have to work out the shared devices idiosyncrasies but that's really it. Thanks fellas.
As always, very informative video. Any way y'all could do one that goes over enrolling the device as a Microsoft Entra Shared Mode device? I'm so lost on how SSO works on it with multiple users. I've set it up to test, but I am not sure I'm doing it right and I haven't found much documentation or any good videos on it. The purpose I am trying to fulfill is to provide an iPad for a certain Team that will need to have one user using it when they are in the office as an alternative to using a laptop, but it is also going to be needed for other users to use for events where they may play music connected to a bluetooth speaker or have it setup to do surveys so they can hand it to people to fill out. We are a University in Texas, and this will be used for multiple purposes and multiple users. So, I didn't think doing Enroll with User Affinity was the way to go. Any videos you could do on this particular mode would be great! Thanks guys!
I really like all your videos. keep up the good work. Your demos are amazing!
You guys are really helping me with migrating to Intune at work, I greatly appreciate it
How do you create/generate managed Apple IDs?
Also idk if you mentioned it and I missed it but can you force the user to sign in to Company Portal?
Thanks for the reboot! And don't forget, sometimes you need to click on top, sometimes you need to click the dots and infuriatingly sometimes you need to right click... (e.g. to remove a user form a shared iPad)
Awesome video - Would you mind to share which screen mirroring tool you are using?
Maybe another detail that weren't mentioned in the video is that you can actually use a TAP in the setup assistant while getting the prompts, because if you have CA-policies deployed that enforce authenticator registration for the first time the setup wizard will freeze/keep spinning and doesn't support registration when using "Setup Assisstant with Modern auth/JIT". It seems like in order to bypass the "authenticator registration prompt" you need to add an "Authentication method" before hand like either "TAP" or "SMS/Voice call" to support it. However, if users has a second device they can easily complete the Auth app registration process in the setup assistant.
Steve is using an ATEM MIni and OBS to display screens.
Hey Guys!
I have a question regarding the screen sharing from the out of box experience. How were you able to record/achieve this? I'd like to create a video walk through/tutorial for my company when on-boarding new users and I'd love to create a video to give to new users instead of a long Word/PDF doc. This video was incredibly helpful so thank you so much for creating content like this.
We use a Blackmagic design atem mini, to capture the HDMI, with either a lightning to HDMI adaptor (you need to keep the firmware up to date on it, so can be inconsistent) or recently usb-c to HDMI with the iPhone 15 (heaps easier and works just out of the box as you'll see in some up coming videos)
@@IntuneTrainingThank you!
The company portal variant isn't compatible with the latest iOS versions anymore. Microsoft has an article on this that company's should switch.
Also missing the new JiT enrollment solution in this video 😊
Hi! Do you have a link to the article about the compability issue?
Maybe you can create also video about how to setup iOS SSO extension and how this is working with office365 apps?
thanks very much for the video. I have used this as a guide but not sure if I've missed something. When trying to install apps via company portal I get hit with the apps requesting apple ID to download. Is there something I can check to prevent this?
Looks nice, but how do you enforce the device/user to fully mdm enroll into Intune. People can skip that step and ignore CP and still use the phone and apps without it.
Thank you. Please update the video in Playlist and we’re is the video with Configure Supervisor to add iPhones in ABM that you don t have invoice or provider that can add them.
Use Apple Configurator from an iPhone to enroll new or reset devices into ABM. Apple docs have good info on this.
If you have a macOS device, capturing the screen of an iPad or iPhone can be done easily with QuickTime over USB.
we don't have official apple store in my country so cannot follow this waiting for next part ;)
Is there any option to try ABM in demo lab without all that paperwork? Any option to try it without providing all that business information, numbers etc 😅
Not that we found
When does the Apple Configurator step alluded to at 8:05 come out?
Yes please do apple configurator❤
Awesome Video!
Tough question here: Am I able to set up an iPhone with user affinity and register it to a user without entering a password during the enrollment process? This has been a requirement for a bunch of big corporations. Passwords are just bad when it comes to security and authenticating and I was wondering if it is possible to register an iPhone to a user without the user having to enter his M365 password.
With VMware Workspace one you can enroll devices with a token that the user can generate himself in a self service portal. Is there a similar solution within Intune?
Thanks in advance!
If your flying the passwordless flag the answer is yes, but it is configured in entra ID rather then Intune, as it controls the gate into the platform.
You can force passwordless via conditional access policies on device registration
@@IntuneTraining Thanks for the Information! So password-less enrollment is possible. I did try it with TPA - Temporary Access Pass and it did work without any issues.
We were originally trying to enroll an iPhone with Fido Keys (maybe even NFC capable once) but when enrolling an iPhon there is no option for Fido Key. So it seems like the iOS Platform is not capable of doing that. TPA is probably the best password-less option right?
Best Regards and thx again!
i have installed apple configurator and trying to enroll devices to intune - i can see the devices in ABM but unable to enroll devices in intune- it shows it's ready to renroll. i made sure profile is assigned to device. later is reset deivce and it shows it controlled by my organisation but no apps are pushed like company portal etc. Can you please guide me what am i doing wrong. or do it have to install company portal manually
Tnx. I found it😅
Is there an assumption that federated access has been turned on?
Is there a way to suppress that
Hi I have a quick question everytime i try to sign in on company portal. after sign in i get an error contact company support there isn't a device setup for this account yet contact support to setup a device. Do you happen to kno wthe reason
Check grace periods, and conditional access rulea
@@IntuneTraining Thankyou for the reply i dont have any comditional access setup and the grace period is 7 days still the same issue i a facing Thank you
Hi, is there any way to add existing company iPhones to ABM without Apple Konfigurator (because you do not have any Mac devices in your company)?
Yes. We were just talking about doing a video on this soon. Short answer is use Configurator on an iPhone. You have to wipe the device then you hold it next to the phone with Configurator and it will display a QR code to scan to enroll. Super simple. Search Apple docs for Apple Configurator iOS App for instructions.
@@IntuneTraining already figured it out myself ;) Working without any issues, other than having to wait the initial 30days where the user can reclaim the phone.
I think that’s called tax evasion not donations 😂