BYOD iOS Mobile Device User Guidance

Setting up Company Portal on Apple devices

Step 1

Remove any work accounts from 365 Applications on your device (or uninstall if you only use them for work). They will be re-installed as part of your work profile once you have created it.

Step 2

From the App Store install Intune Company Portal, once installed open this and sign in using your work email and password. Select if you want to receive notifications.

Graphical user interface, applicationDescription automatically generated Graphical user interface, text, applicationDescription automatically generated

Step 3

Create work profile by clicking ‘Begin’.

Graphical user interface, text, applicationDescription automatically generated Graphical user interface, applicationDescription automatically generated

Step 4

Install work profile from Settings app following the onscreen instructions.

TextDescription automatically generated

A screenshot of a phoneDescription automatically generated with medium confidence Graphical user interface, applicationDescription automatically generated Graphical user interface, text, application, chat or text messageDescription automatically generated

You are then prompted to enter your device passcode. Then select to ‘install’ the Management Profile

Graphical user interface, text, applicationDescription automatically generated A screenshot of a computerDescription automatically generated with low confidence

The following warning screen will be displayed – please be advised that the organisation will only ever have remote access to the data and apps within the work profile. We cannot view or affect anything within the personal profile beyond the device type and operating system to check the security requirements. Your personal data, apps and browsing history are still private to you. Please select ‘Install’ to continue followed by ‘Trust’ for remote management and you will then see the confirmation screen where you can select ‘Done’.

Graphical user interface, textDescription automatically generated Graphical user interface, applicationDescription automatically generated

Step 5

InTune will check that your device is compliant (has a recent version of iOS and is not rooted/jailbroken etc). Select ‘Install’ when prompted and complete with ‘Done’

Graphical user interface, text, applicationDescription automatically generated TextDescription automatically generated

InTune will then check if your device meets our security and compliance policies, ask for permission for LCC to manage the ‘InTune Company Portal’ app and then install the ‘Microsoft Planner’ app.

A screenshot of a phoneDescription automatically generated with medium confidence

Step 6

Default apps will automatically install (this includes Outlook, Teams, OneDrive), more apps are available from within the Company Portal app. Apps will allow the use of biometrics you currently have setup on your device.

A screenshot of a phoneDescription automatically generated with medium confidence A picture containing text, screenshot, font, designDescription automatically generated A screenshot of a login pageDescription automatically generated with medium confidence

Step 7

Initial use of a Microsoft app will prompt for the installation and setup of the Microsoft Authenticator app, click ‘Get the app’ to begin installation and setup.

A screenshot of a computer errorDescription automatically generated with low confidence A screenshot of a phoneDescription automatically generated with low confidence A screenshot of a computerDescription automatically generated with medium confidence

Step 8

Set up MS Authenticator – Add work account and use your work credentials to sign in. Once set up click ‘Finish’

A screenshot of a phoneDescription automatically generated with low confidence A screenshot of a deviceDescription automatically generated with low confidence

You can then go back to the Microsoft app you opened and complete authentication to gain access.

A screenshot of a phoneDescription automatically generated with low confidence A picture containing text, screenshot, software, operating systemDescription automatically generated

Step 9

Set a PIN to access your work data through the company portal. This must be 6 digits and is separate from any screen lock PIN on your device. This will be required after 30 minutes of inactivity within a Work Profile app.

A screenshot of a phoneDescription automatically generated with medium confidence

Finally don’t forget to set up quiet hours for notifications ensuring that you are able to be ‘off the clock’ when you choose. This is very important for your mental health and wellbeing and will hopefully allow staff to set healthy boundaries between work and homelife.

If you encounter any issues with this set up, please contact ict@lancaster.gov.uk for assistance from our Service Desk team