Publishing the WorkZone Mobile (New) for Android on Microsoft Intune (Azure Portal)

Prerequisite:

  • Internal domain users are synced to Entra ID and user groups with access to WorkZone Mobile (New) exist.
  • Conditional access policies are created. See Set up security and access from mobile devices.
  • Intune is set up so that mobile devices are managed and the devices are marked as "in compliance" by Intune.
  • Managed Google Play account must be synchronized:

Log in to the Microsoft Azure portal.

Add Microsoft Authenticator, Intune Managed Browser, and the Microsoft Office apps

Optionally, you can add the Microsoft Authenticator app, the Intune Managed Browser app, and a number of Microsoft Office apps to improve user experience with the WorkZone Mobile (New).

  1. Go to Microsoft Intune.
  2. Click Apps > Platforms > Android.
  3. Click Create. In the App type field, select Store app > Managed Google Play.
  4. Click Select in the menu.
  5. Type Microsoft Authenticator into the search field and select Microsoft Authenticator from the available options.
  6. Click Select.
  7. Type Microsoft Edge into the search field and select the application.
  8. Click Select.
  9. Type Microsoft into the search field and select the applications that you want to add.
  10. Click Select.
  11. Click Sync.
  12. From the app list, select individual application, and click Properties under Manage.
  13. Under Assignments, click Edit.
  14. Under Required, click Add Group.
  15. Type EMS_Licensed_Users into the search field, and click Select.
  16. Click Review + save.
  17. Click Save.

Add the WorkZone Mobile (New) app

  1. Go to Microsoft Intune.
  2. Click Apps > Platforms > Android.
  3. Click Create. In the App type field, select Store app > Managed Google Play.
  4. Click Select.
  5. Type WorkZone into the search field and select WorkZone published by KMD A/S.
  6. Click Select.
  7. Click Sync.
  8. From the app list, select WorkZone Mobile, and click Properties under Manage.
  9. Under Assignments, click Edit.
  10. Under Required, click Add Group.
  11. Type EMS_Licensed_Users into the search field, and click Select.
  12. Click Review + save.
  13. Click Save.

For more information, see Microsoft articles:

Create an app configuration policy

WorkZone Mobile (New) supports pushing certain connection settings to the mobile devices through Intune. This is done by creating an app configuration policy and assigning the policy to the app users.

  1. In Intune, click Apps > Managed Apps > Configuration.
  2. Click Create > Managed devices, and fill in the required information (see example below).
  3. In the Targeted app, select WorkZone.
  4. Click OK.
  5. Click Configuration settings and select Enter JSON data in the Configuration settings format list. Adjust your data.

{

"kind": "androidenterprise#managedConfiguration",

"productId": "app:dk.kmd.kmd_workzone",

"managedProperty": [

{

"key": "mamserverurl",

"valueString": "[URL to your WorkZone server]"

},

{

"key": "mamauthorityurl",

"valueString": "[Authority URL to your WorkZone server]"

},

{

"key": "mamclientid",

"valueString": "[ClientID]"

},

{

"key": "mamuserprincipalname",

"valueString": "{{userprincipalname}}"

}

]

}

Tip:

You can find the ClientID based on the Azure Configuration (Single app registration or Enterprise application registration) in your environment:

  • Single app registration: Under Azure Active Directory > App registrations > [Name of your WorkZone Mobile (New) app] where it is called Application (client) ID.

    For the detailed steps, see Microsoft article Register an application with the Microsoft identity platform.

  • Enterprise application registration: Under Azure Active Directory > Enterprise applications > [Name of your WorkZone Mobile (New) app] where it is called Application (client) ID.

    For the detailed steps, see Microsoft article Add an enterprise application.

  1. Click Review + save.
  2. Click Save.
  3. Under Assignments, click Edit.
  4. Under Required, click Add Group.
  5. Type EMS_Licensed_Users into the search field, and click Select.
  6. Click Review + save.
  7. Click Save.