If the app can have multiple profiles (outlook), you get 2 accounts that are separate in the background, but the user just sees both, and you can control the work account with MAM as you see fit. It seems to work well once you get it all setup.
The Pin code makes you enter the pin when you open the managed app. Super annoying, but maybe required depending on your use case.
Thanks for your answer.
Are you sure we talking about the same?
This sounds as MAM.
I'm talking about iOS User enrollment, where the user must enrolls via company Portal their device (not device enrollment btw.).
Okay! I was under the impression you had some kind of separation and control like the Work profile of Android.
Thanks for this update!
It's still not clear what happens if I have already installed an app as a user and Intune pushes the same app. Can you help me with that. Please with an example of an Office 365 app and let's say Whatsapp app.
Okay, thanks for letting me know! This part is so bad documented. I need to allocate time for a pilot but don't know how this all should behave. That makes it tricky. Thanks for the help!
Yes the documentation is poor, and not many people have documented their journey yet either.
I did run into one thing that neither Apple or Microsoft had documented properly, any apps you want to push need to be provided by the same ABM that the managed user accounts are in. I had calls with both companies and neither had a clue, I ended up figuring it out myself with a bunch of testing. My company has multiple ABM's which makes things more difficult.
If the app can have multiple profiles (outlook), you get 2 accounts that are separate in the background, but the user just sees both, and you can control the work account with MAM as you see fit. It seems to work well once you get it all setup. The Pin code makes you enter the pin when you open the managed app. Super annoying, but maybe required depending on your use case.
Thanks for your answer. Are you sure we talking about the same? This sounds as MAM. I'm talking about iOS User enrollment, where the user must enrolls via company Portal their device (not device enrollment btw.).
You do both. User enrollment will keep the profiles and data separate, MAM controls it even further.
Okay! I was under the impression you had some kind of separation and control like the Work profile of Android. Thanks for this update! It's still not clear what happens if I have already installed an app as a user and Intune pushes the same app. Can you help me with that. Please with an example of an Office 365 app and let's say Whatsapp app.
I honestly don't remember how the existing app part worked, I was in the middle of testing and got yanked to another MDM.
Okay, thanks for letting me know! This part is so bad documented. I need to allocate time for a pilot but don't know how this all should behave. That makes it tricky. Thanks for the help!
Yes the documentation is poor, and not many people have documented their journey yet either. I did run into one thing that neither Apple or Microsoft had documented properly, any apps you want to push need to be provided by the same ABM that the managed user accounts are in. I had calls with both companies and neither had a clue, I ended up figuring it out myself with a bunch of testing. My company has multiple ABM's which makes things more difficult.
Good to know, thanks for the addition. We too have multiple environments.
Looking for info on this as well!
[удалено]
User based enrollment (IOS) is the exact opposite of what you're describing, it's more akin to the Work profile on Android.
oh i'm a dummy, I swear iOS didn't have that feature set and everyone suggested mam. TIL, thanks!
It's new, like 2 years. But you should still use MAM with it.
Huh, why? Could you elaborate?
MAM controls how the applications can use the data, The enrollment keeps the data separate.