Configure Indoors for mobile app management

Available with the ArcGIS Indoors Maps extension.

Mobile app management (MAM) provides granular controls at the app level that allow system administrators to manage and secure an app and its data. It is relevant for organizations that have a bring your own device (BYOD) program or other similar cases. It differs from mobile device management (MDM), which focuses on controlling the entire device instead of specific apps.

If your organization wants to deploy ArcGIS Indoors through MDM, refer to Configure Indoors for mobile device management for details.

Microsoft Intune is a cloud-based service that focuses on both MDM and MAM.

ArcGIS Indoors supports MAM with Intune through a separate Indoors for Intune app that is available from the Apple App Store.

The app supports app protection policies and conditional access policies that are configured in Microsoft Endpoint Manager.

Note:

You need Indoors for Intune if your organization uses MAM policies and you have configured workspace reservation with Microsoft 365 in your Indoors map using the resource mailbox and want your users to book office hotels and meeting rooms using the Indoors mobile app.

Prerequisites

Microsoft Azure Active Directory

You must have a Conditional Access policy or create one for the Indoors for Intune app and apply it to specific users of groups. You must have access to Microsoft Azure Portal or you must work with someone who has access to complete the following steps:

1. Visit Microsoft Azure Portal and sign in with an account having administrative access.
2. Click Conditional Access.
3. Create a policy and configure it pursuant to your organization's requirements.

Microsoft Endpoint Manager

You must have an App Protection policy or create one for the Indoors for Intune app and apply it to specific users of groups. You must have access to Microsoft Azure Portal or you must work with someone who has access to complete the following steps:

1. Visit Microsoft Endpoint Manager and sign in with an account having administrative access.
2. Go to Applications, and select App Protection Policies.
3. Create a policy and configure it pursuant to your organization's requirements.

Indoors for Intune

You must have the Microsoft Intune Company Portal app installed, and sign in with your Microsoft 365 account before you can use Indoors for Intune.

Before installing or launching Indoors for Intune, complete the steps below. You can skip these steps if your organization uses MAM policies for other mobile apps.

1. Install Microsoft Authenticator from the Apple App Store.
2. Sign in with your Microsoft 365 account.
3. Follow the prompts based on the policy requirements.
4. Install Indoors for Intune from the Apple App Store.
5. Tap Sign in.

   Note:

   If your ArcGIS organization is set up with SSO using SAML and uses Microsoft 365 accounts, you are signed in automatically.

6. Provide the URL to your ArcGIS organization and use ArcGIS credentials to sign in.

Sign in to your Microsoft 365 account in Indoors for Intune

You must sign in to your Microsoft 365 account in Indoors for Intune to make office hotel and meeting room bookings.

To sign in, complete the following steps:

1. Download and open a mobile map that is configured with a workspace reservation using Microsoft 365.
2. Tap the Hotel or Meeting button on the quick access bar.

   A prompt to sign in to your Microsoft 365 account appears.

3. Follow the prompts and complete the sign in process.
4. Book an office hotel or a meeting room.

A confirmation email is sent to your Outlook mailbox and an event appears in your Outlook calendar.