Select the following Microsoft Graph permission: On the 'Request API Permissions' page, select Microsoft Graph from the available Microsoft APIs, and then select Application Permissions. On the newly-created application's page, click API Permissions in the 'Manage' section, and then click Add a Permission. You'll be sent to the details page for the new app registration. Create Azure Active Directory Applicationġ. Log in to the Microsoft Azure Administrator console as an Azure AD administrator with the 'Global Administrator' role.Ĭlick Azure Active Directory and then click on the Azure Active Directory domain.Ĭlick on App registrations in the 'Manage' section of your Azure domain's blade.Įnter a descriptive name for the application and select Accounts in this organizational directory only under 'Supported account types'.Ĭlick Register.

These instructions create a single-tenant application where the application is intended to run within only one organization. You only need to register one Azure app for Duo to use with all three client operating systems. Perform these Azure app registration steps prior to the specific Android, iOS, or Windows configuration steps.

Deploy the Duo Device Health app to the Windows clients for which you want to verify management status.

If configuring for iOS devices, that an Apple MDM Push Certificate has been configured in Intune and is active.

An Azure Subscription associated with your Azure Active Directory tenant.

Access to Azure Active Directory as an administrator with the rights to create new app registrations.

Access to the Duo Admin Panel as an administrator with the Owner, Administrator, or Application Manager Duo administrative role.

This guide walks you through Intune configuration for Android and iOS mobile devices.

Trusted Endpoints is part of the Duo Beyond plan.īefore enabling the Trusted Endpoints policy on your applications, you'll need to deploy the Duo device certificate or REST API access for Duo to your managed mobile devices. You can monitor access to your applications from managed and unmanaged devices, and optionally block access from devices not managed by your organization. When a user authenticates via the Duo Prompt, we'll check for the access device's management status. Learn more about migration options in the Duo Trusted Endpoints Certificate Migration Guide.ĭuo's Trusted Endpoints feature secures your sensitive applications by ensuring that only known devices can access Duo protected services. Migrate existing iOS Certificate Configuration management integrations to iOS Configuration and existing Windows Certificate Configuration management integrations to Windows Configuration. Certificate-based Trusted Endpoint verification for Intune reaches end of life on September 1, 2022.

Duo get android sms on mac