Configure Indoors for mobile application management

Available with the ArcGIS Indoors Maps extension.

Mobile application management (MAM) provides granular controls at the application level that allow system administrators to manage and secure an application and its data. It is relevant for organizations that have a bring your own device (BYOD) program or other similar cases. It differs from mobile device management (MDM), which focuses on controlling the entire device instead of specific apps.

Learn more about deploying through MDM.

Microsoft Intune is a cloud-based service that focuses on both MDM and MAM.

ArcGIS Indoors supports MAM with Intune through a separate Indoors for Intune app that is available from the Apple App Store.

The app supports app protection policies and conditional access policies that are configured in Microsoft Endpoint Manager.

Note:

You need Indoors for Intune if your organization uses MAM policies and you have configured workspace reservations with Microsoft 365 in your Indoors map using the resource mailbox and want your users to book office hotels and meeting rooms using the Indoors mobile app.

Prerequisites

Microsoft Entra ID

You must have a Conditional Access policy or create one for the Indoors for Intune app and apply it to specific users of groups. You must have access to Microsoft Azure portal or you must work with someone who has access to complete the following steps:

1. Access Microsoft Azure portal and sign in with an account that has administrative access.
2. Click Conditional Access.
3. Create a policy and configure it according to your organization's requirements.

Microsoft Endpoint Manager

You must have an App Protection policy or create one for the Indoors for Intune app and apply it to specific users of groups. You must have access to Microsoft Azure portal or you must work with someone who has access to complete the following steps:

1. Access Microsoft Endpoint Manager and sign in with an account that has administrative access.
2. Go to Applications, and choose App Protection Policies.
3. Create a policy and configure it according to your organization's requirements.

Indoors for Intune

You must have the Microsoft Intune Company Portal app installed, and sign in with your Microsoft 365 account before you can use Indoors for Intune.

Before installing or launching Indoors for Intune, complete the steps below. You can skip these steps if your organization uses MAM policies for other mobile apps.

1. Install Microsoft Authenticator from the Apple App Store.
2. Sign in with your Microsoft 365 account.
3. Follow the prompts based on the policy requirements.
4. Install Indoors for Intune from the Apple App Store.
5. Tap Sign in.

   Note:

   If your ArcGIS organization is set up with SSO using SAML and uses Microsoft 365 accounts, you are signed in automatically.

6. Provide the URL to your ArcGIS organization and use ArcGIS credentials to sign in.

Sign in to your Microsoft 365 account in Indoors for Intune

You must sign in to your Microsoft 365 account in Indoors for Intune to make office hotel and meeting room bookings.

To sign in, complete the following steps:

1. Download and open a mobile map that is configured with a workspace reservation using Microsoft 365.
2. Tap the hotel or meeting options on the quick access menu.

   If a custom name was specified for these options, it will be displayed instead.

   A prompt to sign in to your Microsoft 365 account appears.

3. Follow the prompts and complete the sign in process.
4. Book an office hotel or a meeting room.

A confirmation email is sent to your Outlook mailbox and an event appears in your Outlook calendar.