Endpoint Management: Private phone (iOS)

To access the UU Microsoft 365 apps (Outlook, Teams, OneDrive, Word, etc.) and associated data, you have to install the Microsoft Authenticator app.

Your private iOS device (iPhone or iPad) cannot be equipped with the Intune Company Portal. This would block private access to Microsoft apps. To still ensure that you can securely access the UU Microsoft 365 apps (Outlook, Teams, OneDrive, Word, etc.) and associated data, you must install the Microsoft Authenticator app. This installs a function in the background that allows for a limited – but equally secure – portal function and does not impede private use of the apps. For logging in with 2FA nothing changes, for this you just keep using the UU standard (NetIQ, Google or Yubikey).

Your phone has to:

• A recent iOS version
• Have a screen lock PIN-code (with a minimum of 6 numbers)
• Protected with 2FA

At the UU, the following apps are considered business apps:

1. Company portal
2. Microsoft 365 (Office)
3. Microsoft Outlook
4. Microsoft OneDrive
5. Microsoft PowerPoint
6. Microsoft Word
7. Microsoft Excel
8. Microsoft OneNote
9. Microsoft Teams
10. Microsoft Skype for Business
11. Microsoft Lens – PDF Scanner
12. Microsoft Stream
13. Microsoft Lists
14. Microsoft Visio Viewer
15. Microsoft Whiteboard
16. Microsoft Launcher
17. Microsoft Planner
18. Microsoft 365 Admin
19. Microsoft Azure Information Protection Viewer
20. Microsoft SharePoint
21. Microsoft Kaizala
22. Microsoft PowerApps
23. Microsoft To-Do
24. Microsoft Power Automate
25. Microsoft Power BI
26. Microsoft Yammer
27. Microsoft Bookings
28. Microsoft Authenticator
29. Microsoft Dynamics CRM

RESTRICTIONS

The following conditions and restrictions apply to devices with an Apple iOS operating system:

• The copying, (cutting/pasting) of business data to personal apps is not possible;
• The copying, (cutting/pasting) of business data between business apps is always possible;
• The saving of business documents is only possible in Microsoft Onedrive or Sharepoint;
• The saving of business documents on your own phone or tablet is not possible;
• After 30 minutes (of not using a business app) the PIN will have to be entered again to be able to open business apps.

If you’ve already installed Microsoft 365 apps to reach business data (like your UU-mail), those apps won’t be able to reach UU-data after the installation of Intune. After this you will use the apps that are installed via Intune. This changes itself after the installation.

In this manual, an iPhone with iOS version 14 was used. Pictures can differ with different versions of iOS.

• 

  To follow this manual any further, a 2FA app has to be installed. For more information about 2FA, see: https://intranet.uu.nl/en/2fa .

  TRANSFERRING 2FA AND DATA FROM OLD TO NEW SMARTPHONE
  If you receive a replacement (business) phone from your employer, you need to transfer information and applications from your old to your new phone. To access UU data such as your UU mail, your device must be protected with Endpoint Management.

• 

  Step 1

  Installing the Outlook app for business use

  Attention: have you not yet installed the Microsoft Authenticator? Install this first, before continuing.

  • Open the Apple Store on your device (phone or tablet), and download the Microsoft Authenticator app.
  • Logging in on the Microsoft Authenticator app with your Solis-ID is not necessary.

×

• 

  Step 2

  If Outlook is already installed, you can skip this step and continue to step 3.

  • Search the Apple Store for the Outlook app, and install it.
  • Click “Open” to start the Microsoft Outlook app.

×

• 

  Step 3

  • Fill in your work e-mail address (@uu.nl) where it says “E-mailadres”, and click “Add account”.

×

• 

  Step 4

  After this, the Microsoft Authenticator app will open.

  • Press “Open Authenticator”
  • You will het a pop-up on your screen. Once you’ve read this pop-up, press “OK” at the bottom of it.
  • You will be directed to a login screen of the Utrecht University.

×

• 

  Step 5

  • Give your password that is connected to your @uu.nl e-mail address, and press “Continue”.
  • The 2FA-app will automatically start for authentication.
  • Authenticate the app.

×

• 

  Step 6

  After the authentication your device will have to be registered for secured access.

  • Press “Register”.

×

• 

  Step 7

  Microsoft Outlook will now start up with the question if a second account should be added. For now this can be skipped.

  • Press “Not now”.

   

×

• 

  Step 8

  A pop-up will appear saying that Microsoft Outlook will have to be restarted to apply the changes.

  • Press “OK”.

  Microsoft Outlook will restart.

×

• 

  Step 9

  When Microsoft Outlook has restarted, you will receive a notification that the app is now being managed by the UU.

  • Press “OK”.

×

• 

  Step 10

  You will now be asked to set up a 6-digit PIN for the app.

  You will then be asked to confirm the 6-digit PIN by entering it again.

×

• 

  Step 11

  You will be asked for permission to your phone’s contacts.

  • Give this permission by pressing “Open settings”.

×

• 

  Step 12

  • Within the settings screen, scroll down until you see Outlook.
  • Select “Outlook”.

×

• 

  Step 13

  • In the settings for Outlook, press the slider next to “Contacts” so that it turns green.
  • The permissions for contacts have now been configured.
  • Close the settings and start the Outlook app again.

×

• 

  Step 14

  When Microsoft Outlook has restarted, you will get another pop-up asking to enable notifications.

  Select “Enable” if you want your inbox to always be updated.

×

• 

  Step 15

  Finally, Microsoft Outlook will ask if it can send notifications.

  • Select the preferred option

  The Microsoft Outlook app has now been correctly installed.
  

×

Last modified: 22/08/2024