Microsoft Intune

This guide covers deploying SupportID from Apple Business Manager and configuring it through Microsoft Intune (Endpoint Manager).

Adding the App

1. Ensure your Intune tenant is connected to an Apple Business Manager VPP token and licenses for SupportID have been purchased.
2. Navigate to Apps → iOS/iPadOS → Add.
3. Select iOS volume-purchased app (if synced via ABM token) or iOS store app.
4. Search for SupportID and select it.
5. Assign to your target Azure AD groups as Required for silent installation.

Tip

If SupportID doesn’t appear under volume-purchased apps, sync your VPP/ABM token under Tenant administration → Connectors and tokens → Apple VPP tokens and try again.

Creating App Configuration Policy

1. Navigate to Apps → App configuration policies → Add → Managed devices.
2. Select iOS/iPadOS as the platform.
3. Associate with the SupportID app.
4. Choose your configuration format (JSON recommended).
5. Assign to the same groups as the app.

Configuration Formats

JSON (Recommended)

{
  "appTitle": "Company Portal",
  "uiStyle": "Regular",
  "selfServiceProvider": "intune",

  "dataPoint1": "{{serialnumber}}",
  "dataPoint1Label": "Serial Number",
  "dataPoint1Icon": "barcode",
  "dataPoint1Visible": true,

  "dataPoint2": "{{devicename}}",
  "dataPoint2Label": "Device Name",
  "dataPoint2Icon": "iphone",
  "dataPoint2Visible": true,

  "dataPoint3": "{{userprincipalname}}",
  "dataPoint3Label": "User Email",
  "dataPoint3Icon": "envelope",
  "dataPoint3Visible": true,

  "dataPoint4": "{{userid}}",
  "dataPoint4Label": "User ID",
  "dataPoint4Icon": "person.text.rectangle",
  "dataPoint4Visible": true,

  "dataPoint5": "{{deviceid}}",
  "dataPoint5Label": "Device ID",
  "dataPoint5Icon": "antenna.radiowaves.left.and.right",
  "dataPoint5Visible": true,

  "showStorageSection": true,
  "showShortcutsSection": true
}

Configuration Designer

Add each key individually using the Configuration Designer:

Configuration Key	Value Type	Value
appTitle	String	Company Portal
uiStyle	String	Regular
selfServiceProvider	String	intune
dataPoint1	String	{{serialnumber}}
dataPoint1Label	String	Serial Number
dataPoint1Icon	String	barcode
dataPoint1Visible	Boolean	true
dataPoint2	String	{{username}}
dataPoint2Label	String	User Name
dataPoint2Icon	String	person
dataPoint2Visible	Boolean	true
showStorageSection	Boolean	true
showShortcutsSection	Boolean	true

XML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>appTitle</key>
    <string>Company Portal</string>

    <key>selfServiceProvider</key>
    <string>intune</string>

    <key>dataPoint1</key>
    <string>{{serialnumber}}</string>
    <key>dataPoint1Label</key>
    <string>Serial Number</string>

    <key>dataPoint2</key>
    <string>{{username}}</string>
    <key>dataPoint2Label</key>
    <string>User Name</string>
</dict>
</plist>

Available Intune Variables

Variable	Description
{{serialnumber}}	Device serial number
{{devicename}}	Device name
{{deviceid}}	Azure AD device ID
{{userid}}	Azure AD user ID
{{username}}	User display name
{{userprincipalname}}	User principal name (email)
{{devicetype}}	Device type (iPhone, iPad)
{{osversion}}	iOS version

Tip

Intune variables use lowercase inside double curly braces: {{variablename}}. This differs from Jamf ($VARIABLE) and Workspace ONE ({Variable}).

Company Portal Integration

Setting selfServiceProvider to intune adds a shortcut that launches Microsoft Company Portal using companyportal://.

Requirements:

• Company Portal must be installed on the device

Group Assignment

Assign the app and configuration policy to the same Azure AD groups:

• All Devices — Deploy broadly across your organization
• Dynamic groups — Based on device type, OS version, or department
• User groups — Based on Azure AD user attributes

Caution

Ensure the app configuration policy targets the same groups as the app itself. Devices need both the app and the configuration to function correctly.

Intune Portal Steps

Adding the Configuration in Endpoint Manager

1. Go to Microsoft Endpoint Manager admin center.
2. Navigate to Apps → App configuration policies.
3. Click Add → Managed devices.
4. Name the policy (e.g., “SupportID Configuration”).
5. Select iOS/iPadOS platform.
6. Select SupportID as the targeted app.
7. Under Configuration settings format, choose Enter JSON data.
8. Paste the JSON configuration from above.
9. Click Next → assign to groups → Create.

Testing

1. Assign to a test group with one or two devices.
2. Sync the device from Company Portal or wait for automatic check-in.
3. Open SupportID → tap the gear icon → verify Configuration Status shows Active.
4. Confirm data points show correct values from Intune.
5. Tap the Company Portal button to verify it launches correctly.