Microsoft Intune App SDK Cordova Plugin


You may wish to first read the Get Started with Intune App SDK article, which explains how to prepare for integration on each supported platform.


The Intune App SDK Cordova Plugin enables Intune mobile app management features in iOS and Android apps built with Cordova. The plugin allows developers to integrate Intune app and data protection features into their Cordova-based app.

You will find that you can enable SDK features without changing your app’s behavior. Once you've built the plugin into your iOS or Android mobile app, the IT admin will be able to deploy policy via Microsoft Intune Mobile Application Management (MAM) supporting a variety of data protection features. We have built the plugin so that most the steps are automatically performed in the Cordova build process. As a result, you should be able to get your app enabled for management quickly. To get started, follow the steps below based on your target platform.

What's supported?

Developer machines

  • Windows
  • Mac OS

Mobile app platforms

  • Android 4.0+
  • iOS

Intune Mobile Application Management scenarios

  • Intune MDM-enrolled devices
  • Third-party EMM-enrolled devices
  • Unmanaged devices (not enrolled with any MDM)

Cordova apps built with the Intune App SDK Cordova Plugin can now receive Intune mobile application management (MAM) policies on both Intune mobile device management (MDM) enrolled devices and unenrolled devices.


Technical prerequisites

Before you install and use Microsoft Intune App SDK Cordova Plugin you must:

  • Review the Intune App SDK Cordova Plugin License Terms.

  • Print and retain a copy of the license terms for your records. By downloading and using Intune App SDK Cordova plugin you agree to such license terms. If you do not accept them, do not use the software.

Quick start

  1. Update your version of ADAL:

     cordova plugin remove cordova-plugin-ms-adal
     cordova plugin add cordova-plugin-ms-adal@0.8.x
  2. Add the Intune App SDK for Cordova plugin:

     cordova plugin add cordova-plugin-ms-intune-mam

How to build the plugin into your iOS app

You'll need to complete some steps for your app to be Intune MAM enabled. For convenience, these steps are performed automatically in the Cordova build process as a pre-build hook. As a result, the automated steps will modify your *.pbxproj , *-Info.plist, and *.entitlements files that are associated with a project configuration. If your project doesn't contain an entitlements file, the plugin will create one automatically.

This setup only supports a single target and will perform the configuration on the first target found if there are multiple targets. If the process fails, check that:

  1. Your app's Xcode project is [name].xcodeproj where [name] is the value defined in config.xml
  2. Your project uses the standard Cordova app directory structure.

How to build the plugin into your Android app

  1. Import this plugin with the latest Cordova tools. The plugin will be automatically invoked as an after_compile step.

  2. The plugin will create a MAM enabled version of a built apk (Android API 14+) at the end of the build process. The build output will contain a [Project]-intunewrapped-[Build_Configuration].apk (e.g. helloWorld-intunewrapped-debug.apk).

The plugin only supports gradle builds.

Due to a Cordova bug filed here that causes certain Cordova hooks to be ignored on cordova run, to run the wrapped app from the command line, you must do the following:

$ cordova build
$ cordova run --nobuild

Signing your Android app

To add signing information to the wrapped apk, modify build.json as you normally would for adding signing information. For example:

  "android": {
    "release": {
      "keystore": "your.keystore",
      "storePassword": "yourpassword",
      "alias": "youralias",
      "password" : "yourpassword",
      "keystoreType": ""

Build for Android test only

  1. Add android:testOnly="true" to the application node of the AndroidManifest.xml file.

  2. Cordova 6.x.x: In [PROJECT_ROOT]/platforms/android/cordova/lib/Adb.js, change line 60 from

     var args = ['-s', target, 'install'];


     var args = ['-s', target, 'install', '-t'];

The effect of this is to run adb install with the "-t" flag since testOnly apps are not installable without it.

Debugging from Visual Studio

After launching the app for the first time you should see a dialog notifying you that the app is managed by Intune. Hit "Don't show again" and click the debug/run button again from VS for breakpoints to be hit.

Known Limitations


  • MultiDex support is incomplete.
  • App must target Android 4.0 (Android API 14) or above.


  • Whenever you modify the list of UTI’s under the CFBundleDocumentTypes node of the Info.plist file, you must clear the Intune UTI’s in the Imported UTI’s section of the same plist file (UTImportedTypeDeclarations node) before building again. All of the Intune UTI’s will start with the prefix

  • If you want to remove the Intune plugin from your Cordova project, you must also remove the iOS platform and re-add it to undo some of the Intune configuration in the .xcodeproj and .plist files.

To submit product feedback, please visit Intune Feedback