BYOD Intune Enrollment Instruction for iOS
Benefits of Enrolling your Personal Device with UCI Health
- Install select iOS applications without the need of using your personal Apple ID.
- Enjoy the convenience of visiting the Microsoft Company Portal and browse all available and require application in one place. No need to search for each one via your device’s app store.
- Many of the UCI Health applications are preconfigured so there is no need to configure them to log in with your HS account.
- Only the applications you install through the Microsoft Company Portal will be uninstalled in the event your phone is lost or if you are no longer associated with UCI Health.
- This assures HIPAA compliance.
- Provides the best way to keep your personal information private while accessing work related applications on your personal device.
-
We DO NOT monitor the following:
- Your application activity
- Your browsing activity or history
- Your messages or calls
- Your profile or documents
- Your emails
- Your location
Enrolling your iOS Device
Before you start:
- If you have enrolled in a Mobile Device Manager (MDM) with another company, you will need to unenroll from that before proceeding.
-
If you connected to UCIH-Staff prior to following the enrollment instructions, please make sure to “Forget” this network from your iPhone’s Wi-Fi settings before proceeding.
If you skip this step and experience connectivity issues with UCIH-Staff, you will need to unenroll from the MDM, forget the network, and start the setup process again.
- For iOS devices running iOS 17.6.1 or greater, you may be prompted to wait up to an hour to install the Intune profile. This is Apple’s new security setting. Please wait the time provided and then continue with the Intune enrollment. If you like further information on Apple’s security feature, please visit Apple KB: https://support.apple.com/en-us/120340
Download the Company portal App:
1. Open the App Store on your iOS device.
2. Search for “Microsoft Intune Company Portal” and download the app.
NOTE: If you had previously unenrolled your device with Intune and are re-enrolling you may only be prompted with your password when the profile is being downloaded.
Enroll your Device:
Step 1:
Open the Microsoft Intune Company Portal app.
Step 2:
Login with your HS account.
(example: peteranteater@hs.uci.edu)
Step 3:
You may need to complete multifactor authentication or other verification steps.
(If you are re-enrolling as part of troubleshooting, you may have to tap the red notification and click on “this device is not managed”)
Step 4:
Review the information on the welcome screen and tap Begin.
Step 5:
Download the Management Profile.
Step 6:
Click Allow to download profile.
Step 7:
Click Close on pop-up window.
Step 8:
Stop here. You will need to install the profile that was just downloaded before you can continue.
Install the profile:
Step 1:
Go to your home screen.
Step 2:
Open the Settings App.
Step 3:
Click on Profile Downloaded.
Step 4:
Click Install on the top right of the profile.
Step 5:
Type in your iPhone’s passcode.
(What you use to unlock the phone.)
Step 6:
Click Install.
(You may run in to an error here, please see the troubleshooting section.)
Step 7:
Click Install again.
Step 8:
Click Trust to trust the profile.
Step 9:
Click Done.
Step 10:
Once installed return to the Microsoft Intune Company Portal app.
Complete Enrollment:
Step 1:
Open the Microsoft Intune Company Portal app.
NOTE: You may be prompted to install required applications. Click Install and continue.
Step 2:
Click Continue.
Step 3:
Click Done.
Enforce Pin:
1. If a pin is not already set on your device, you will be prompted to create one.
2. The pin must be a minimum of a 6-digit number or greater.
Installing Required applications:
1. Any application installed by the Microsoft Company Portal app will require your permissions to install. Click Install to proceed.
Managing Applications:
1. If you have an existing application that also exist on the Microsoft Intune Company Portal app, you may be prompted to have that application Managed. Click Allow to proceed.
Connecting to UCIH-Staff WiFi:
1. Once you have successfully enrolled to the MDM, navigate to your WIFI settings, and select UCIH-Staff. You will not be required to authenticate; it will connect once selected. We also encourage you to forget the UCIH-Guest to assure that your devices does not automatically switch to this WIFI
Installing Applications
Please be sure you have completed enrolling your device prior to attempting to install applications.
Step 1:
Open the Microsoft Intune Company Portal app.
The main window will list recently updated apps.
Step 2:
Click on View all apps to view all the apps available to install.
Step 3:
Click on the app you like to install.
Step 4:
Click on Install on the app description window.
Wait for pop-up to confirm installing of the app to your device.
If you don’t get the pop up, try installing again.
Step 5:
These applications are licensed to your device and NOT to your Apple ID. If you unenroll from Intune it will uninstall any app you installed through the Microsoft Intune Company Portal app.
Apps Available Through the Microsoft Company Portal App:
- 3M Mobile Microphone
- Abridge for Clinicians
- athenaCapture
- Avaya Workplace
- Cisco Secure Client
- Citrix Workspace
- Duo Mobile
- DynaMed
- Epic Canto
- Epic Haiku & Limerick
- Microsoft Authenticator
- Microsoft Edge: AI Browser
- Microsoft Excel
- Microsoft OneDrive
- Microsoft OneNote
- Microsoft Outlook
- Microsoft Planner
- Microsoft Sharepoint
- Microsoft Teams
- Microsoft To Do
- Microsoft Word
- Microsoft Teams
- Microsoft Outlook
- Okta Verify
- ServiceNow Agent
- TigerConnect
- Voalte ME
- Windows App Mobile
- Zoom Workplace
If you unenroll from the MDM you will lose apps installed this way.
To identify what apps will be uninstalled please see the ‘Troubleshooting’ section.
Unenrolling from Intune
If you were enrolled in our previous MDM “Airwatch”, please see the section below for
“Unenroll Your Device From AirWatch MDM”
Keep in mind when unenrolling:
- Expect loss of access to corporate apps and data.
- Backup any critical data before unenrolling.
- Unenrolling removes configurations and applications that might impact compliance.
Step 1:
Open the Company Portal App.
Step 2:
Click on the Devices tab.
Step 3:
Select the device you want to unenroll.
Step 4:
Click on the 3-dots (…)
Step 5:
Click on “Remove device”.
Step 6:
A confirmation message will appear.
Tap “Remove” again to confirm.
Alternate Intune Unenrollment Method:
1. Open Settings.
2. Go to General.
3. Go to VPN & Device management.
4. Click on Management Profile.
5. Click on Remove Management.
6. Restart your phone.
Unenroll Your Device From AirWatch MDM:
1. Open Settings.
2. Go to General.
3. Go to VPN & Device management.
4. Click on Workspace Services.
5. Click on Remove Management.
6. Restart your phone.
How to identify which applications will be removed when you unenroll from MDM:
1. Open Settings.
2. Go to General.
3. Go to VPN & Device management.
4. Click on either Workspace Services or Management Profile.
5. Click on Apps
6. Screenshot the app list so you can keep track of the applications you will have uninstalled or need to re-install later.
Troubleshooting
If for any reason you are having problems installing a profile or need to unregister your device follow these steps.
Note: All applications installed through Intune will be uninstalled and you will lose access to the UCIH-Staff Wifi.
Profile Installation Failed Errors:
Error 1:
If you get this error,
see unenrollment instructions in the “iOS unenrollment” section.
Error 2:
If you get this error, restart your phone,
and attempt enrollment steps again.
For assistance please visit the Self-Service Portal or call ITS Service Desk at 714.456.3333