This post is really a companion piece to a blog entry I wrote previously, ‘Deploying Microsoft Teams to iOS MDM devices via hybrid Intune/ConfigMgr‘.
The idea is to deploy an iOS app to a mobile device, however this time we will associate a Mobile Application Management (MAM) policy to the app.
MAM policies allow you to modify the app and align them with compliance and security policies that you may have set in your company.
Peter Daalmans has a nice blog post listing apps that are enabled for MAM http://configmgrblog.com/resources/mam-enabled-apps-in-the-app-stores/
I’ll be deploying the Power BI app in this tutorial.
The process to create the app is identical to the one used in the Deploying Microsoft Teams to iOS MDM devices via hybrid Intune/ConfigMgr post.
Start off by getting the URL for the app in iTunes.
Create your application in the ConfigMgr console with the ‘Type’ ‘App Package for iOS from App Store’ then paste in the URL to the ‘Location’ field. Complete the wizard to create the application.
Now we need to create the MBAM policy that we can associate with the deployment of the application.
In the ConfigMgr console navigate to the Software Library workspace and go to Application Management>Application Management Policies. Right click and click ‘Create Application Management Policy’
Name the policy appropriately and click Next.
Choose the Platform ‘iOS’ and Policy Type ‘General’ and click Next.
On the next screen, we are presented with a list of policies that can be applied to the deployment. I have left the defaults in place for this tutorial but take a look at the Microsoft TechNet documentation for an overview of the policies and their settings https://docs.microsoft.com/en-gb/intune/deploy-use/configure-and-deploy-mobile-application-management-policies-in-the-microsoft-intune-console
Click ‘Next’.
Click ‘Close’ to complete the creation of the MAM policy.
Now return to the application in the console, right click and select ‘Deploy’.
The deployment of the application follows the process outlined in Deploying Microsoft Teams to iOS MDM devices via hybrid Intune/ConfigMgr however this time you will have an extra step, ‘Application Management’. Here you can associate your deployment type with the MAM policy. Follow the wizard through to completion.
Sign in to the Company Portal on an iOS device targeted by the deployment. The application will appear in ‘All Apps’, Power BI in my case. Tap the app to install.
Tap the ‘Install’ button and complete the installation process.
Launch the app once it has installed.
You’ll instantly notice that the MAM policy is in effect when the following warning appears on the screen. Hit OK.
In my case, I was prompted to enter and confirm a pin to access the app.
and then I was up and running with a MAM enabled Power BI app on the iOS device.
SCCMentor - Paul Winstanley 