LogoLogo
Provectus Technologies GmbH
  • Introduction
    • Secure Contacts App (SCA) - Safe & GDPR Compliant
    • Technical / Security Overview
    • Editions
    • Requirements
  • Quickstart Guide
    • iOS (MAM) - Steps to activate SCA in your Entra Tenant
      • Step 1 -MAM- Register Enterprise App
      • Step 2 -MAM- Add App Protection Policy
      • Step 3 -MAM- Add Conditional Access Policy
      • Step 4 -MAM- Add App Configuration Policy
    • iOS (Intune Managed Device) - Steps to activate SCA in your Entra Tenant
      • Step 1 -MDM- Register Enterprise App
      • Step 2 -MDM- Add App Protection Policy
      • Step 3 -MDM- Add Conditional Access Policy
      • Step 4 -MDM- Add App Configuration Policy
    • Android (Android Enterprise) - Steps to activate SCA in your Entra Tenant
      • Step 1 -AE- Register Enterprise App
      • Step 2 -AE- Add App Configuration Policy
    • Android (aMAM) - Steps to activate SCA in your Entra Tenant
      • Step 1 -aMAM- Register Enterprise App
      • Step 2 -aMAM- Add App Configuration Policy
      • Step 3 -aMAM- Add App Protection Policy
      • Step 4 -aMAM- Add Conditional Access Policy
    • Additional Datasource for SCA
    • Best-Practice Guide for SCA
  • Enduser guide
    • iOS - Onboarding SCA
    • iOS - activate Caller Identification
    • iOS - Userguide
    • iOS - App Manual
      • Contacts page
      • Contacts Sync
      • Contact information
      • Contact settings menu
      • Side menu
      • Logviewer
      • Help menu
      • vCard
    • Android Enterprise - Userguide
  • Documentation
    • Authentication
      • Enterprise Application
      • Conditional Access
        • CA with SCA - Require Complaint Device
        • SCA with CA - Require App Protection Policy
    • Deployment SCA
      • iOS - App Installation
      • Android - App Installation
      • App Configuration
        • iOS - MobileDeviceManagement (MDM) protocol
        • Android - App Restrictions
        • AppConfigurationPolicies
          • iOS - App Configuration Policies - MAM Integration in Microsoft Intune
          • Android - App Configuration Policies - MDM Integration in Microsoft Intune
      • App Protection Policy - Integration in Microsoft Intune
        • APP - unmanaged Devices
        • APP - managed Devices
        • Requirement - Open phone-settings
        • Requirement - Open Maps app
        • Requirement - Open GoogleMaps app
        • Requirement - Open WebExTeams
        • Requirement - Open WhatsApp
        • Requirement - Open Facetime
        • Requirement - Open email-link from SCA in Outlook
      • Deployment for your Devices in Intune
        • Deployment iOS - MAM-WE - APP only
        • Deployment iOS MDM - Managed & Complaint Device
        • Deployment iOS MDM - Managed Device & APP
        • Deployment Android MDM - Managed Device
    • App Configuration Policy -Name/Values for SCA
      • SCA Configuration - SecContacts.Defaults
      • SCA Configuration - SecContacts.Licenses
      • SCA Configuration - AAD filters
      • SCA Configuration - AAD groups
      • SCA Configuration - Connect additional Datasource
      • SCA Configuration - Custom Datasource Names
      • SCA Configuration - CI Customization
    • Data Sources
      • AAD - Azure Active Directory
      • GAL - Global Address List
      • APC - Personal Outlook Contacts
      • D365 - Dynamics 365
      • DVRS - Dataverse
      • ABS - Azure Blob Storage
      • SMC - Shared Mailbox Contacts
    • Valid phone numbers for SCA
    • iOS and Android version of SCA in comparison
  • Additional Information
    • Troubleshooting
    • Frequently Asked Questions (FAQ)
    • Phone number handling defaults changed in release v2.0.19
    • Links
    • Product Page - Secure Contacts App
Powered by GitBook
On this page
  • App Protection Policy
  • Conditional Access Policy

Was this helpful?

  1. Documentation
  2. Deployment SCA
  3. Deployment for your Devices in Intune

Deployment iOS - MAM-WE - APP only

Last updated 2 years ago

Was this helpful?

Implement SCA as within Microsoft Endpoint Manager. Our App can be downloaded from the App Store directly and installed on any device. The moment a user connects with the AAD-account Access control via Azure AD Conditional Access enforces our App to require a App Protection Policy for the SCA.

App Protection Policy

  1. Login to Endpoint Manager with your Admin-Account

  2. Go to Apps → App protection policies or follow this link:

  3. Click on Create policy and select iOS/iPadOS

  4. Enter a Name for your Policy e.g. “Secure Contacts App Protection Policy”

  5. Click Next

  6. In the Apps pane, change Target to apps on all device types to No Select the box Unmanaged for Device types

  7. Click on + Select public apps and search for “Secure Contacts”

  8. Select the app and confirm with Select

  9. Click Next on the Apps pane

  10. Please proceed configuring App Protection Policies as recommended by Microsoft

  11. Finish the setup by clicking on Create

You can use all policies in App Protection Policies as recommended by Microsoft. It is possible to add SCA to your existing App Protection Policy.

Conditional Access Policy

For SCA is mandatory to create a Conditional Access-Policies or you can add SCA to your existing Conditional Access Policies

  1. Login to Endpoint Manager with your Admin-Account

  2. Click on New policy to create a new Conditional Access policy

  3. Enter a Name for the Policy e.g. “Secure Contacts Conditional Access Policy”

  4. Go to Users or workload identities in Assignments

  5. Go to Cloud apps or actions in Assignments

  6. Set mandatory Conditions for your environment

  7. Go to Grant in the Access controls pane

  8. Set Enable Policy to On

  9. Click on Create

According to Microsoft, it is mandatory to target Office 365 and Secure Contacts as Cloud App in your Conditional Access Policy in order to correctly implement SCA. It is required to add Office 365 as Cloud App, because our Enterprise Application (Provectus - Secure Contacts) is using these data sources.

Go to Endpoint security → Conditional access or follow this link:

Include your SCA-Testgroup to Users and Groups

Include as Cloud Apps the apps Office 365 and Provectus - Secure Contacts

Set Require app protection policy

Conditional Access - Microsoft Endpoint Manager admin center
Mobile Application Management (MAM) App
App protection policies - Microsoft Endpoint Manager admin center