Add and use Wi-Fi settings on your devices in Microsoft Intune
Wi-Fi is a wireless network that's used by many mobile devices to get network access. Microsoft Intune includes built-in Wi-Fi settings that can be deployed to users and devices in your organization. This group of settings is called a "profile", and can be assigned to different users and groups. Once assigned, your users get access your organization's Wi-Fi network without configuring it themselves.
For example, you install a new Wi-Fi network named Contoso Wi-Fi. You then want to set up all iOS/iPadOS devices to connect to this network. Here's the process:
- Create a Wi-Fi profile that includes the settings that connect to the Contoso Wi-Fi wireless network.
- Assign the profile to a group that includes all users of iOS/iPadOS devices.
- On their devices, users find the new Contoso Wi-Fi network in the list of wireless networks. They can then connect to the network, using the authentication method of your choosing.
This article lists the steps to create a Wi-Fi profile. It also includes links that describe the different settings for each platform.
Supported device platforms
Wi-Fi profiles support the following device platforms:
- Android 5 and newer
- Android Enterprise and kiosk
- Android (AOSP)
- iOS 11.0 and newer
- iPadOS 13.0 and newer
- macOS X 10.12 and newer
- Windows 11
- Windows 10
- Windows Holographic for Business
For devices running Windows 8.1, you can import a Wi-Fi configuration that was previously exported from another device. For more information, see Import Wi-Fi settings for Windows devices.
Create the profile
Sign in to the Microsoft Endpoint Manager admin center.
Select Devices > Configuration profiles > Create profile.
Enter the following properties:
Platform: Choose the platform of your devices. Your options:
- Android device administrator
- Android (AOSP)
- Android Enterprise
- Windows 10 and later
- Windows 8.1 and later
Profile: Select Wi-Fi. Or, select Templates > Wi-Fi.
- For Android Enterprise devices running as a dedicated device (kiosk), choose Fully Managed, Dedicated, and Corporate-Owned Work Profile > Wi-Fi.
- For Windows 8.1 and newer, you can choose Wi-Fi import. This option lets you import Wi-Fi settings as an XML file that you previously exported from a different device.
In Basics, enter the following properties:
- Name: Enter a descriptive name for the profile. Name your profiles so you can easily identify them later. For example, a good profile name is WiFi profile for entire company.
- Description: Enter a description for the profile. This setting is optional, but recommended.
In Configuration settings, depending on the platform you chose, the settings you can configure are different. Select your platform for detailed settings:
In Scope tags (optional), assign a tag to filter the profile to specific IT groups, such as
US-NC IT Teamor
JohnGlenn_ITDepartment. For more information about scope tags, see Use RBAC and scope tags for distributed IT.
In Assignments, select the user or groups that will receive your profile. For more information on assigning profiles, see Assign user and device profiles.
In Review + create, review your settings. When you select Create, your changes are saved, and the profile is assigned. The policy is also shown in the profiles list.
If you use certificate based authentication for your Wi-Fi profile, deploy the Wi-Fi profile, certificate profile, and trusted root profile to the same groups to ensure that each device can recognize the legitimacy of your certificate authority. For more information, see How to configure certificates with Microsoft Intune.
Submit and view feedback for