SCEM: Private phone (iOS)
To access the UU Microsoft 365 apps (Outlook, Teams, OneDrive, Word, etc.) and associated data, you have to install the Microsoft Authenticator app.
Your private iOS device (iPhone or iPad) cannot be equipped with the Intune Company Portal. This would block private access to Microsoft apps. To still ensure that you can securely access the UU Microsoft 365 apps (Outlook, Teams, OneDrive, Word, etc.) and associated data, you must install the Microsoft Authenticator app. This installs a function in the background that allows for a limited – but equally secure – portal function and does not impede private use of the apps. For logging in with 2FA nothing changes, for this you just keep using the UU standard (NetIQ, Google or Yubikey).
Your phone has to:
- Have a recent version of iOS (13 or higher)
- Have a screen lock PIN-code (with a minimum of 6 numbers)
- Protected with 2FA
At the UU, the following apps are considered business apps:
- Company portal
- Microsoft 365 (Office)
- Microsoft Outlook
- Microsoft OneDrive
- Microsoft PowerPoint
- Microsoft Word
- Microsoft Excel
- Microsoft OneNote
- Microsoft Teams
- Microsoft Skype for Business
- Microsoft Lens – PDF Scanner
- Microsoft Stream
- Microsoft Lists
- Microsoft Visio Viewer
- Microsoft Whiteboard
- Microsoft Launcher
- Microsoft Planner
- Microsoft 365 Admin
- Microsoft Azure Information Protection Viewer
- Microsoft SharePoint
- Microsoft Kaizala
- Microsoft PowerApps
- Microsoft To-Do
- Microsoft Power Automate
- Microsoft Power BI
- Microsoft Yammer
- Microsoft Bookings
- Microsoft Authenticator
- Microsoft Dynamics CRM
RESTRICTIONS
The following conditions and restrictions apply to devices with an Apple iOS operating system:
- The copying, (cutting/pasting) of business data to personal apps is not possible;
- The copying, (cutting/pasting) of business data between business apps is always possible;
- The saving of business documents is only possible in Microsoft Onedrive or Sharepoint;
- The saving of business documents on your own phone or tablet is not possible;
- After 30 minutes (of not using a business app) the PIN will have to be entered again to be able to open business apps.
If you’ve already installed Microsoft 365 apps to reach business data (like your UU-mail), those apps won’t be able to reach UU-data after the installation of Intune. After this you will use the apps that are installed via Intune. This changes itself after the installation.
In this manual, an iPhone with iOS version 14 was used. Pictures can differ with different versions of iOS.
-
To follow this manual any further, a 2FA app has to be installed. For more information about 2FA, see: https://intranet.uu.nl/en/2fa .
TRANSFERRING 2FA AND DATA FROM OLD TO NEW SMARTPHONE
If you receive a replacement (business) phone from your employer, you need to transfer information and applications from your old to your new phone. To access UU data such as your UU mail, your device must be protected with SCEM. -
Step 1
Installing the Outlook app for business use
Attention: have you not yet installed the Microsoft Authenticator? Install this first, before continuing.
- Open the Apple Store on your device (phone or tablet), and download the Microsoft Authenticator app.
- Logging in on the Microsoft Authenticator app with your Solis-ID is not necessary.
-
Step 2
If Outlook is already installed, you can skip this step and continue to step 3.
- Search the Apple Store for the Outlook app, and install it.
- Click “Open” to start the Microsoft Outlook app.
-
Step 3
- Fill in your work e-mail address (@uu.nl) where it says “E-mailadres”, and click “Add account”.
-
Step 4
After this, the Microsoft Authenticator app will open.
- Press “Open Authenticator”
- You will het a pop-up on your screen. Once you’ve read this pop-up, press “OK” at the bottom of it.
- You will be directed to a login screen of the Utrecht University.
-
Step 5
- Give your password that is connected to your @uu.nl e-mail address, and press “Continue”.
- The 2FA-app will automatically start for authentication.
- Authenticate the app.
-
Step 6
After the authentication your device will have to be registered for secured access.
- Press “Register”.
-
Step 7
Microsoft Outlook will now start up with the question if a second account should be added. For now this can be skipped.
- Press “Not now”.
-
Step 8
A pop-up will appear saying that Microsoft Outlook will have to be restarted to apply the changes.
- Press “OK”.
Microsoft Outlook will restart.
-
Step 9
When Microsoft Outlook has restarted, you will receive a notification that the app is now being managed by the UU.
- Press “OK”.
-
Step 10
You will now be asked to set up a 6-digit PIN for the app.
You will then be asked to confirm the 6-digit PIN by entering it again.
-
Step 11
You will be asked for permission to your phone’s contacts.
- Give this permission by pressing “Open settings”.
-
Step 12
- Within the settings screen, scroll down until you see Outlook.
- Select “Outlook”.
-
Step 13
- In the settings for Outlook, press the slider next to “Contacts” so that it turns green.
- The permissions for contacts have now been configured.
- Close the settings and start the Outlook app again.
-
Step 14
When Microsoft Outlook has restarted, you will get another pop-up asking to enable notifications.
Select “Enable” if you want your inbox to always be updated.
-
Step 15
Finally, Microsoft Outlook will ask if it can send notifications.
- Select the preferred option
The Microsoft Outlook app has now been correctly installed.
Last modified: 17/07/2023