# Android (aMAM) - Steps to activate SCA in your Entra Tenant

This guide shows you all required steps to onboard SCA in your environment.\
This configuration uses SCA with [Mobile Application Management (MAM)](https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-mamwe) within Microsoft Intune.\
\
SCA can be downloaded from the Play Store directly and installed on any Android device.

## Preconditions <a href="#id-5stepstoactivatescainyourazuretenant-preconditions" id="id-5stepstoactivatescainyourazuretenant-preconditions"></a>

For this Quick Guide, the AAD-Role “Global Administrator” or a comparable Administrator role in Microsoft Intune is required, depending on your RBAC-Concept.

You need an Entra-User with a proper license assigned. The test-device for SCA should have the latest OS-version and Microsoft Authenticator installed.

You need additionally an Entra-Security Group with your test user as Member.

You need a test-device with SCA deployed via Intune and Managed Google Play Store.

<table data-view="cards"><thead><tr><th></th><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><a href="android-android-enterprise-steps-to-activate-sca-in-your-azure-tenant-1/step-1-register-enterprise-app">Step 1 -aMAM- Register Enterprise App</a></td><td><br>Register Enterprise App with your tenant-ID from our website.</td><td></td><td><a href="android-android-enterprise-steps-to-activate-sca-in-your-azure-tenant/step-1-register-enterprise-app">step-1-register-enterprise-app</a></td></tr><tr><td><a href="android-android-enterprise-steps-to-activate-sca-in-your-azure-tenant-1/step-2-add-app-configuration-policy">Step 2 -aMAM- Add App Configuration Policy</a></td><td><br>Create an App Configuration Policy for licensing.</td><td></td><td><a href="android-android-enterprise-steps-to-activate-sca-in-your-azure-tenant/step-2-add-app-configuration-policy">step-2-add-app-configuration-policy</a></td></tr><tr><td><a href="android-android-enterprise-steps-to-activate-sca-in-your-azure-tenant-1/step-2-add-app-protection-policy">Step 3 -aMAM- Add App Protection Policy</a><br><br>Create an App Protection Policy in Intune<br><br></td><td></td><td></td><td></td></tr><tr><td><a href="android-android-enterprise-steps-to-activate-sca-in-your-azure-tenant-1/step-3-add-conditional-access-policy">Step 4 -aMAM- Add Conditional Access Policy</a></td><td></td><td>Create a Conditional Access Policy for SCA.</td><td></td></tr></tbody></table>

{% hint style="info" %}
In this Guide you can also find the Features of SCA and the difference \
in between [Standard vs. Enterprise Editon](https://docs.secure-contacts.com/introduction/editions).
{% endhint %}

{% hint style="success" %}
In case you have further questions see our [Frequently Asked Questions (FAQ)](https://docs.secure-contacts.com/additional-information/frequently-asked-questions-faq).\
Your question is missing in the FAQ? Do not hesitate to [contact us](https://secure-contacts.com/en/kontakt-beratung/)!
{% endhint %}