To learn more about assigning apps, see Assign apps to groups.Multi-factor authentication is not required, but it is available for this authentication method within Conditional Access if needed. If the tenant has multi-factor authentication turned on for these devices or users, the users will be asked to complete multi-factor authentication during enrollment during Setup Assistant. User affinity is established when users complete the additional Azure AD login into the Company Portal app on the device. Users must sign into the Company Portal to complete Azure AD authentication and gain access to resources protected by Conditional Access. This will require an additional Azure AD login post-enrollment in in the Company Portal app to gain access to corporate resources protected by Conditional Access and for Intune to assess device compliance. The user has to authenticate using Azure AD credentials during the setup assistant screens. Install Company Portal for macOS using the Apple Setup Assistantįor macOS devices running 10.15 and later, when creating an Automated Device Enrollment profile, you can now choose a new authentication method: Setup Assistant with modern authentication. The script will require Internet access when it runs to download the current version of the Company Portal for macOS.
