Intune · Product news
Require Managed Home Screen authentication for protected app activities
For Android Enterprise dedicated devices using Managed Home Screen (MHS) with Microsoft Entra shared device mode, Intune will allow admins to requiring users to complete MHS authentication state before allowing protected activities in MAM-integrated apps.
What changed
When MHS requires sign-in or session PIN authentication, users will still be able to complete limited actions, such as accepting or declining incoming calls. If a user tries to open another protected activity, the app will return them to MHS to authenticate.
Why it matters
Device-management changes can affect policy processing, reporting, app delivery or support workflows across managed endpoints.
Known limitations
- Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.
Now check
- Verify Android Enterprise dedicated-device and Entra shared-device prerequisites
- Test MHS sign-in or session PIN before protected app activity
- Confirm permitted call behavior and user guidance