Azure MFA for Enrollment in Intune and Azure AD Device registration explained

I have been working with setup of MFA required for enrollement in Intune abit lately and have discovered a couple of things that is not really explained well in the Intune console/documentation.

Enrollment of devices in Intune will in most cases also trigger a device registration in Azure AD. This registration in Azure AD can easily be connected to a MFA requirement by just configure your Azure AD to require MFA for device registration. But this does not apply to all scenarios, so in this blogpost I am going to go into each plattform and explain what happens during enrollment and how the MFA is triggered. I will also cover different options for enrollment of Windows 10 Mobile.  Continue reading

Configure synchronization for Apple VPP in Microsoft Intune

183_1

Organizations that want to start purchasing volume licensed iOS apps can finally leverage Apple Volume Purchase Program (Apple VPP) with Microsoft Intune. Almost all of the apps available in iTunes Store (App Store) can be volume purchased and distributed to managed devices. In this blog post, we will cover the requirements for Apple VPP and show you how you can configure Microsoft Intune to synchronize information from Apple VPP. Continue reading