Intune · Product news

Require Managed Home Screen authentication for protected app activities

For Android Enterprise dedicated devices using Managed Home Screen (MHS) with Microsoft Entra shared device mode, Intune will allow admins to requiring users to complete MHS authentication state before allowing protected activities in MAM-integrated apps.

What changed

When MHS requires sign-in or session PIN authentication, users will still be able to complete limited actions, such as accepting or declining incoming calls. If a user tries to open another protected activity, the app will return them to MHS to authenticate.

Why it matters

Device-management changes can affect policy processing, reporting, app delivery or support workflows across managed endpoints.

Known limitations

  • Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

  • Verify Android Enterprise dedicated-device and Entra shared-device prerequisites
  • Test MHS sign-in or session PIN before protected app activity
  • Confirm permitted call behavior and user guidance

Related Intune news

Establish a macOS security baseline with mSCP and Microsoft Intune custom compliance

Manage referenced apps on AOSP devices

Legacy Apple MDM software update workloads removed from Intune

Administrator protection settings in Account protection policies

Push notification support update for Windows devices

Browse all news