Skip to main content
Question

Ipad Compliance with entra and Intune.

  • November 21, 2025
  • 2 replies
  • 44 views
tdenton
Forum|alt.badge.img+11

Hello

 

Is anyone doing ipad compliance everything is working great nearly.

The self service process to register device in Entra.  - All good
Them been mark as compliant - All good.

We are struggling with these keys which when pushed with an app should stop app protection from applying. But where still seeing the prompts for it.

 

<!-- Intune MAM Integration -->

      <key>IntuneMAMUPN</key>

      <string>$EMAIL</string>

Has anyone else come accross this?

 

Thanks

Tom

    2 replies

    Chubs
    Forum|alt.badge.img+21
    • Chubs
    • Jamf Heroes
    • November 21, 2025

    What else is in your appconfig?

    I find your lack of faith disturbing
    tdenton
    Forum|alt.badge.img+11
    • tdenton
    • Author
    • Valued Contributor
    • November 24, 2025
    <dict>
    	<!-- Account Settings -->
    	<key>com.microsoft.outlook.EmailProfile.AccountType</key>
    	<string>ModernAuth</string>
    	<key>com.microsoft.outlook.EmailProfile.ServerHostName</key>
    	<string>outlook.office365.com</string>
    	<key>com.microsoft.outlook.EmailProfile.AccountName</key>
    	<string>Office 365</string>
    	<key>com.microsoft.outlook.EmailProfile.EmailAddress</key>
    	<string>$EMAIL</string>
    	<key>com.microsoft.outlook.EmailProfile.EmailUPN</key>
    	<string>$EMAIL</string>
    	<key>com.microsoft.outlook.EmailProfile.AllowAppAccountChange</key>
    	<false/>
    	<key>com.microsoft.outlook.EmailProfile.EnableSSO</key>
    	<true/>
    	<key>com.microsoft.outlook.EmailProfile.AllowAdditionalAccounts</key>
    	<false/>
    	<!-- Authentication & Security -->
    	<key>com.microsoft.outlook.Auth.Broker</key>
    	<true/>
    	<key>com.microsoft.outlook.Auth.Biometric</key>
    	<true/>
    	<key>com.microsoft.outlook.Auth.Biometric.UserChangeAllowed</key>
    	<false/>
    	<!-- UX Preferences -->
    	<key>com.microsoft.outlook.Mail.FocusedInbox</key>
    	<true/>
    	<key>com.microsoft.outlook.Mail.OrganizeByThreadEnabled</key>
    	<true/>
    	<key>com.microsoft.outlook.Mail.DefaultSignatureEnabled</key>
    	<true/>
    	<key>com.microsoft.outlook.Mail.BlockExternalImagesEnabled</key>
    	<true/>
    	<!-- Intune MAM Integration -->
            <key>IntuneMAMUPN</key>
            <string>$EMAIL</string>
    </dict>

    This is what we use for Outlook have just been using Intune MaM bit for other apps. Have been struggling to fine good Jamf documation for avilable key. I assume the Intune ones should work.

    Terms & ConditionsCookie settingsAccessibility statement