Set up iOS device access to your company resources

Enroll your iOS device with the Intune Company Portal app to gain secure access to your organization's email, files, and apps.

After your device is enrolled, it becomes managed. Your organization can assign policies and apps to the device through a mobile device management (MDM) provider, such as Intune.

Note

We do not sell any data collected by our service to any third parties for any reason.

To maintain access to work or school information from your device, you'll need to configure your device to match your organization's preferred settings. This article describes how to use Company Portal to enroll you device and maintain access requirements.

Note

If you tried to access you work email in the Mail app, and received a prompt to get your device managed, you're in the right place. Follow the instructions below, which will help you regain access to your email and other work resources on your iOS device.

What to expect from the Company Portal app

Security

During initial setup, the app requires that you authenticate yourself with your organization. It then informs you of any device settings you must update. For example, organizations often set minimum or maximum character password requirements that you'll be required to meet.

Protection

After your device is enrolled, the Company Portal app will continue to make sure that your device is protected. If you install an app from an untrusted source, for example, the app will alert you and sometimes revoke access to company data. This kind of policy is common in organizations, and often requires you to uninstall the untrusted app before you can regain access.

Setting notifications

If after enrollment your organization enforces a new security requirement, such as multi-factor authentication, the Company Portal app will notify you. You'll have the chance to adjust your settings so that you can continue to work from your device.

To learn more about enrollment, see What happens when I install the Company Portal app and enroll my device?.

Prerequisites

  • Device running iOS 11.0 and later.
  • Install Company Portal app from App Store.
  • Maintain a Wi-Fi connection until all steps are complete.
  • Have access to Safari web browser on your device.

Enroll your iOS device

Pausing for more than a few minutes during enrollment might cause the Company Portal app to close or end setup. If this happens, reopen the app and try again.

  1. Open the Company Portal app and sign in with your work or school account.

  2. When prompted to receive Company Portal notifications, tap Allow. Company Portal uses notifications to alert you if, for example, your device settings need to be updated.

  3. On the Set up access screen, select Begin.

    Example screenshot of Company Portal, "Set up access" screen.

  4. The Select device and enrollment type screen appears and prompts for your device type.

    • Tap (Organization) owns this device if you received your device from your organization. Then skip to Secure entire device in this article to finish setup.
    • Tap I own this device if you're using a personal device that you brought from home. Then continue to the next step.

    If you don't see this screen, skip to Secure entire device to finish setup.

    Example screenshot of Company Portal, "Select device and enrollment type" screen, device type options.

  5. Choose how to protect the data on your device once it's enrolled.

    • Tap Secure entire device to secure all apps and data on the device. Then go to Secure entire device to finish setup.
    • Tap Secure work-related apps and data only to secure only the apps and data you access with your work account. Then go to Secure work-related apps and data.

    Example screenshot of Company Portal, "Select device and enrollment type" screen, enrollment type options.

Secure entire device

  1. On the Device management and privacy screen, read through the list of device information your organization can and can't see. Then tap Continue.

Important

These next steps and screens will differ depending on your iOS version. Follow the steps for your iOS version.

  1. Safari opens the Company Portal website on your device. When prompted to download the configuration profile, tap Allow. If you're on a device running:

    • iOS 12.2 and later: When the download is complete, tap Close. Then continue to step 3.
    • iOS 12.1 and earlier: When the download is complete, you are automatically redirected to the Settings app. Skip to step 4.

    If you accidentally tap Ignore, refresh the page. You'll be prompted to open the Company Portal app. Once you're there, tap Download again.

Note

You must install the management profile as described in the next steps within 8 minutes of downloading it. If you don't, the profile will be removed and you'll have to restart enrollment.

  1. When prompted to open Company Portal, tap Open. Read through the information on the How to install Management Profile screen.

  2. Go to the Settings app and tap Enroll in < organization name > or Profile Downloaded.

    Example screenshot of the Settings app, Enroll in organization option.

    If neither options appear, go to General > Profiles & Device Management> Management Profile. If you still don't see a management profile, you may need to download it again.

  3. Tap Install.

  4. Enter your device password. Then tap Install.

  5. The next screen is a standard system warning about device management. To continue with installation, tap Install. If prompted to trust remote management, tap Trust.

  6. After installation is complete, tap Done. To verify that the profile was installed, go to the Profiles & Device Management settings. You should see the profile listed under Mobile Device Management.

    Example screenshot of Settings app, Profiles & Device Management settings, showing the management profile.

  7. Return to the Company Portal app. Company Portal will begin to sync and set up your device. Company Portal might prompt you to update additional device settings. If it does, tap Continue.

  8. You'll know that setup is complete when all items in the list show a green checkmark. Tap Done.

Note

If your organization monitors voice and data limits, or provides you with a company-owned device, you might have a few more steps to complete. If you're prompted to install the Datalert app, see enrolling your device in telecom expense management. If your organization is part of Apple's Device Enrollment Program, find out how to enroll your company-owned device.

  1. The Download Microsoft Authenticator screen appears (if you already have Authenticator, you won't see this screen so skip to step 2).

    1. Tap Download from App Store.
    2. When the App Store opens, install the app.
    3. Return to Company Portal and tap Continue.

    After you install Microsoft Authenticator, you won't need to do anything else with the app. It just needs to be present on your device.

    Example screenshot of Company Portal, "Download Microsoft Authenticator" screen.

  2. On the Device management and privacy screen, read through the list of device information your organization can and can't see. Then tap Continue.

Important

These next steps and screens will differ depending on your iOS version. Follow the steps for your iOS version.

  1. Safari opens the Company Portal website on your device. When prompted to download the configuration profile, tap Allow. If you're on a device running:

    • iOS 12.2 and later: When the download is complete, tap Close. Then continue to step 4.
    • iOS 12.1 and earlier: When the download is complete, you are automatically redirected to the Settings app. Skip to step 5.

    If you accidentally tap Ignore, refresh the page. You'll be prompted to open the Company Portal app. From the app, you can tap Download again.

Note

You must install the management profile as described in the next steps within 8 minutes of downloading it. If you don't, the profile will be removed and you'll have to restart enrollment.

  1. When prompted to open Company Portal, tap Open. Read through the information on the How to install Management Profile screen.

  2. Go to the Settings app and tap Enroll in < organization name > or Profile Downloaded.

    Example screenshot of the Settings app, Enroll in organization option.

    If neither options appear, go to General > Profiles & Device Management> Management Profile. If you still don't see a management profile, you may need to download it again.

  3. On the User Enrollment screen, tap Enroll My iPhone.

    Example screenshot of the Settings app, User Enrollment screen, highlighting the enroll button.

  4. Enter the device password. Then tap Install.

  5. On the Sign in screen, enter the password for your managed Apple ID. In most cases, these credentials will be the same ones you use to sign in to your work or school account, unless your organization provided you with a different set of credentials.

  6. Tap Sign in.

  7. A success message will appear on the screen briefly after the profile is installed. To verify that the profile is installed, go to the Profiles & Device Management settings. You should see the profile listed under Mobile Device Management.

    Example screenshot of Settings app, Profiles & Device Management settings, showing the management profile.

  8. Return to the Company Portal app. Company Portal will begin to sync and set up your device. Company Portal might prompt you to update additional device settings. If it does, tap Continue.

  9. You'll know that setup is complete when all items in the list show a green checkmark. Tap Done.

IT administrator support

If you're an IT administrator and run in to problems while enrolling devices, see Troubleshooting iOS device enrollment problems in Microsoft Intune. This article lists common errors, their causes, and steps to resolve them.

Next steps

Find apps that will help you at work or school. Learn how apps are made available to you through Company Portal.

Still need help? Check in with your company support. You can find their contact information on the Company Portal website.