10/8/19 with a note about macOS Catalina - Intune also supports the launch of macOS Catalina 10.15 which Apple released 10/7/19. 12/9/19 with an update to Modern Authentication within Setup Assistant for Automated Device Enrollments being available within Q1 of 2020. Oct 03, 2017 The Microsoft Intune Company Portal app is available from the Windows Store to allow end users to download and install the app to their own device. It is available from the Download Center to allow administrators to deploy the app to end users who do not have access to the Windows Store.
May 15, 2019 Step 1: Download the Company Portal app from Microsoft On a Mac computer, download the current version of the Company Portal app for macOS from the Microsoft website. Important: Do not install it, you need a copy of the app to upload to Jamf Pro. Intune Company Portal releases updates every month and the next update to the Intune Company Portal will be released in early December 2018. When this happens, only end users that have the latest version of Microsoft AutoUpdate (4.5.0) will be able to see the notification to update to the new Intune Company Portal version.
Before directing users to register their Mac computers with Azure Active Directory (Azure AD), it is necessary to deploy Microsoft's Company Portal app.
Deploying the Company Portal app involves the following steps:
- Download the Company Portal app from Microsoft.
- Upload the Company Portal app to Jamf Pro as a package.
- (Optional) Identify Mac computers that do not have the Company Portal app installed.
- Deploy the Company Portal app to Mac computers.
On a Mac computer, download the current version of the Company Portal app for macOS from the Microsoft website.
Important: Do not install it, you need a copy of the app to upload to Jamf Pro.
The CompanyPortal_Installer.pkg file can be downloaded from: https://go.microsoft.com/fwlink/?linkid=862280
- Upload the Company Portal app to a distribution point in Jamf Pro.
- In Jamf Pro, navigate to Settings > Computer Management > Packages.
- Create a new package that includes the Company Portal app and click Save.
- In Jamf Pro, navigate to Computers > Smart Computer Groups.
- Create a new smart group that identifies Mac computers that do not have the CompanyPortal.app from Microsoft installed.
- Click Save.
- In Jamf Pro, navigate to Computers > Policies and create a policy that deploys the Company Portal app to users.
- Use the General payload to configure the following settings:
- For Trigger, select 'Enrollment Complete' and 'Recurring Check-in'.
- For Execution Frequency, select 'Once per computer'.
- Select the Packages payload, and then click Configure.
- Click Add for the package that includes the Company Portal app.
- Configure the settings for the package.
- Specify a distribution point for Mac computers to download the package from.
- Click the Scope tab to specify Mac computers on which the Company Portal app should be installed.You may also use the smart computer group created in step 3.
- Click Save.
Note: The policy runs on Mac computers in the scope the next time they check in with Jamf Pro and meet the criteria in the General payload.
Managing Packages
Find out how to create a package and upload a file to a distribution point in Jamf Pro.
Find out how to create a package and upload a file to a distribution point in Jamf Pro.
Smart Computer Groups
Find out how to create smart groups in Jamf Pro.
-->Find out how to create smart groups in Jamf Pro.
Use the information in this article to help you add macOS line-of-business apps to Microsoft Intune. You must download an external tool to pre-process your .pkg files before you can upload your line-of-business file to Microsoft Intune. The pre-processing of your .pkg files must take place on a macOS device.
Note
Starting with the release of macOS Catalina 10.15, prior to adding your apps to Intune, check to make sure your macOS LOB apps are notarized. If the developers of your LOB apps did not notarize their apps, the apps will fail to run on your users' macOS devices. For more information about how to check if an app is notarized, visit Notarize your macOS apps to prepare for macOS Catalina.
Note
While users of macOS devices can remove some of the built-in macOS apps like Stocks, and Maps, you cannot use Intune to redeploy those apps. If end users delete these apps, they must go to the app store, and manually re install them.
Before your start
You must download an external tool, mark the downloaded tool as an executable, and pre-process your .pkg files with the tool before you can upload your line-of-business file to Microsoft Intune. The pre-processing of your .pkg files must take place on a macOS device. Use the Intune App Wrapping Tool for Mac to enable Mac apps to be managed by Microsoft Intune.
Important
Java API. Ampl ide for macos.
The .pkg file must be signed using 'Developer ID Installer' certificate, obtained from an Apple Developer account. Only .pkg files may be used to upload macOS LOB apps to Microsoft Intune. Conversion of other formats, such as .dmg to .pkg is not supported.
- Download the Intune App Wrapping Tool for Mac.NoteThe Intune App Wrapping Tool for Mac must be run on a macOS machine.
- Mark the downloaded tool as an executable:
- Start the terminal app.
- Change the directory to the location where
IntuneAppUtil
is located. - Run the following command to make the tool executable:
chmod +x IntuneAppUtil
- Use the
IntuneAppUtil
command within the Intune App Wrapping Tool for Mac to wrap .pkg LOB app file from a .intunemac file.Sample commands to use for the Microsoft Intune App Wrapping Tool for macOS:ImportantEnsure that the argument<source_file>
does not contain spaces before running theIntuneAppUtil
commands.IntuneAppUtil -h
This command will show usage information for the tool.IntuneAppUtil -c <source_file> -o <output_directory_path> [-v]
This command will wrap the .pkg LOB app file provided in<source_file>
to a .intunemac file of the same name and place it in the folder pointed to by<output_directory_path>
.IntuneAppUtil -r <filename.intunemac> [-v]
This command will extract the detected parameters and version for the created .intunemac file.
Select the app type
Microsoft Intune Company Portal Android
- Sign in to the Microsoft Endpoint Manager admin center.
- Select Apps > All apps > Add.
- In the Select app type pane, under the Other app types, select Line-of-business app.
- Click Select. The Add app steps are displayed.
Step 1 - App information
Select the app package file
- In the Add app pane, click Select app package file.
- In the App package file pane, select the browse button. Then, select an macOS installation file with the extension .intunemac.The app details will be displayed.
- When you're finished, select OK on the App package file pane to add the app.
Set app information
Download Microsoft Intune Company Portal For Macos Free
- In the App information page, add the details for your app. Depending on the app that you chose, some of the values in this pane might be automatically filled in.
- Name: Enter the name of the app as it appears in the company portal. Make sure all app names that you use are unique. If the same app name exists twice, only one of the apps appears in the company portal.
- Description: Enter the description of the app. The description appears in the company portal.
- Publisher: Enter the name of the publisher of the app.
- Minimum Operating System: From the list, choose the minimum operating system version on which the app can be installed. If you assign the app to a device with an earlier operating system, it will not be installed.
- Category: Select one or more of the built-in app categories, or select a category that you created. Categories make it easier for users to find the app when they browse through the company portal.
- Show this as a featured app in the Company Portal: Display the app prominently on the main page of the company portal when users browse for apps.
- Information URL: Optionally, enter the URL of a website that contains information about this app. The URL appears in the company portal.
- Privacy URL: Optionally, enter the URL of a website that contains privacy information for this app. The URL appears in the company portal.
- Developer: Optionally, enter the name of the app developer.
- Owner: Optionally, enter a name for the owner of this app. An example is HR department.
- Notes: Enter any notes that you want to associate with this app.
- Logo: Upload an icon that is associated with the app. This icon is displayed with the app when users browse through the company portal.
- Click Next to display the Scope tags page.
Step 2 - Select scope tags (optional)
You can use scope tags to determine who can see client app information in Intune. For full details about scope tags, see Use role-based access control and scope tags for distributed IT.
- Click Select scope tags to optionally add scope tags for the app.
- Click Next to display the Assignments page.
Step 3 - Assignments
- Select the Required, Available for enrolled devices, or Uninstall group assignments for the app. For more information, see Add groups to organize users and devices and Assign apps to groups with Microsoft Intune.
- Click Next to display the Review + create page.
Step 4 - Review + create
- Review the values and settings you entered for the app.
- When you are done, click Create to add the app to Intune.The Overview blade for the line-of-business app is displayed.
The app you have created appears in the apps list where you can assign it to the groups you choose. For help, see How to assign apps to groups.
Note
If the .pkg file contains multiple apps or app installers, then Microsoft Intune will only report that the app is successfully installed when all installed apps are detected on the device.
Update a line-of-business app
- Sign in to the Microsoft Endpoint Manager admin center.
- Select Apps > All apps.
- Find and select your app from the list of apps.
- Select Properties under Manage from the app pane.
- Select Edit next to App information.
- Click on the listed file next to Select file to update. The App package file pane is displayed.
- Select the folder icon and browse to the location of your updated app file. Select Open. The app information is updated with the package information.
- Verify that App version reflects the updated app package.
Note
For the Intune service to successfully deploy a new .pkg file to the device you must increment the package
version
and CFBundleVersion
string in the packageinfo file in your .pkg package.Next steps
- The app you have created is displayed in the apps list. You can now assign it to the groups you choose. For help, see How to assign apps to groups.
- Learn more about the ways in which you can monitor the properties and assignment of your app. For more information, see How to monitor app information and assignments.
- Learn more about the context of your app in Intune. For more information, see Overview of device and app lifecycles