Mass deploy the mobile app with user-based authentication

Article
02/21/2024

Automated deployment and configuration of Warehouse Management can be more efficient than manual deployment when you have many devices to manage. One way to achieve this automation is to use a mobile device management (MDM) solution such as Microsoft Intune. For general information about how to use Intune to add apps, see Add apps to Microsoft Intune.

This article explains how to mass deploy the Warehouse Management mobile app with user-based authentication by using Microsoft Intune.

Important

To use mobile mass deployment (MDM), you must configure the Warehouse Management mobile app to use username/password authentication with single sign-on. This is because it isn't possible to distribute authentication tokens to mobile devices using MDM.

Prerequisites

To use an MDM solution to deploy the Warehouse Management mobile app and the related authentication certificates, you must have the following resources available:

Warehouse Management mobile app version 2.0.41.0 or later (This version number applies to all mobile platforms.)
A valid store account for each mobile platform that you'll support (Microsoft account, Google Account, and/or Apple ID)
Microsoft Entra ID (Microsoft Entra ID Premium P2 license)
Microsoft Endpoint Manager admin center (the Intune website)

Authenticating with or without single sign-on after mass deployment

You can set up user-based authentication for the Warehouse Management mobile app either with or without single sign-on.

Without single sign-on – If you choose to use device code flow authentication, or username/password authentication without single sign-on, then you (or a worker) must authenticate the Warehouse Management mobile app on each device after deploying with MDM.
With single sign-on – If you use username/password authentication with single sign-on, then the Warehouse Management mobile app can authenticate using an existing authentication token on each device, provided the Microsoft Entra ID account required to authenticate the Warehouse Management mobile app is already signed in for another application on the device (such as Microsoft Teams, Company Portal, or Outlook). In this case, no additional authentication may be needed for the device. However, workers may still need to sign in using their warehouse app user account, depending on how you've configured your Microsoft Entra ID and work user accounts (see also [Scenarios for managing devices, Microsoft Entra ID users, and mobile device users]( warehouse-app-authenticate-user-based.md# scenarios).

Set up the source files for distribution

Each MDM solution offers several methods for sourcing the apps that they deliver to end devices. For example, a solution might use locally stored binary files or fetch binaries from an app store. The preferred method is to use app stores, because it's simple and offers the most convenient way to receive updates.

The following subsections provide examples that show how to set up Intune to fetch apps from the different app stores.

Set up Intune to fetch the app from Google Play

Follow these steps to set up Intune to fetch the Warehouse Management mobile app from Google Play.

Sign in to the Microsoft Endpoint Manager admin center.
Go to Apps > Android.
On the Android apps page, on the toolbar, select Add.
In the Select app type dialog box, in the App type field, select Managed Google Play app. Then select Select.
On the Managed Google Play page, if you're setting up Google Play for the first time, you're prompted to sign in to Google Play. Sign in by using your Google account.
In the Search field, enter Warehouse Management. Then select Search.
When you've found the Warehouse Management app, select Approve.
In the Approve settings dialog box, select an option to specify how updates should be handled when a new version of the app requests more permissions than the current version. We recommend that you select the Keep approved when app requests new permissions option. When you've finished, select Done to continue.
Select Sync.
You're returned to the Android apps page. On the toolbar, select Refresh to refresh the list of applications. Then, in the list, select Warehouse Management.
On the Warehouse Management page, on the Properties tab, select the Edit link next to the Assignments heading.
On the Edit application page, on the Assignments tab, add the user groups and/or devices that the Warehouse Management app should be available and/or required for. For information about how to use the settings, see Assign apps to groups with Microsoft Intune.
When you've finished, select Review + save.
On the Review + save tab, review your settings. If they look correct, select Save to save them.

Set up Intune to fetch the app from Microsoft Store

Follow these steps to set up Intune to fetch the Warehouse Management mobile app from Microsoft Store.

Sign in to the Microsoft Endpoint Manager admin center.
Go to Apps > Windows.
On the toolbar, select Add.
In the Select app type dialog box, in the App type field, select Microsoft Store app (new). Then select Select.
On the Add App page, on the App information tab, select the Search the Microsoft Store app (new) link.
In the Search the Microsoft Store app (new) dialog box, in the Search field, enter Warehouse Management.
When you've found the Warehouse Management app, select it, and then select Select.
The App information tab now shows information about the Warehouse Management app. Select Next to continue.
On the Assignments tab, add the user groups and/or devices that the Warehouse Management app should be available and/or required for. For information about how to use the settings, see Assign apps to groups with Microsoft Intune.
When you've finished, select Next to continue.
On the Review + save tab, review your settings. If they look correct, select Create to save them.

Set up Intune to fetch the app from the Apple App Store

Follow these steps to set up Intune to fetch the Warehouse Management mobile app from the Apple App Store.

Sign in to the Microsoft Endpoint Manager admin center.
Go to Devices > iOS/iPadOS.
On the iOS/iPad enrollment tab, select the Apple MDM Push certificate tile.
In the Configure MDM Push Certificate dialog box, follow the on-screen instructions to create and upload the required Apple MDM push certificate. For more information about this step, see Get an Apple MDM push certificate.
Go to Apps > iOS/iPadOS.
On the toolbar, select Add.
In the Select app type dialog box, in the App type field, select iOS store app. Then select Select.
On the Add App page, on the App information tab, select the Search the App Store link.
In the Search the App Store dialog box, in the Search field, enter Warehouse Management. Then, in the drop-down list next to the Search field, select your country or region.
When you've found the Warehouse Management app, select it, and then select Select.
The App information tab now shows information about the Warehouse Management app. Select Next to continue.
On the Assignments tab, add the user groups and/or devices that the Warehouse Management app should be available and/or required for. For information about how to use the settings, see Assign apps to groups with Microsoft Intune.
When you've finished, select Next to continue.
On the Review + save tab, review your settings. If they look correct, select Create to save them.

Manage connection configurations

The Warehouse Management mobile app (version 2.0.41.0 and later) lets you import connection settings as a managed configuration through an MDM solution. The same ConnectionsJson configuration key is shared across all platforms.

The following subsections provide examples that show how to set up Intune to provide managed configuration for each of the supported mobile platforms. For more information, see App configuration policies for Microsoft Intune.

Create a connection JSON file

As a prerequisite for setting up managed configuration of all mobile platforms, you must create a connection JSON file as described in Create a connection settings file or QR code. This file enables the mobile app to connect to and authenticate with your Dynamics 365 Supply Chain Management environment.

Tip

If your JSON file includes more than one connection, one of them should be set as the default connection (by setting the IsDefaultConnection parameter to true for it). If no default connection is set, the app will prompt the user to manually select an initial connection among the available options.

Set up Intune to support managed configuration for Android devices

Follow these steps to set up Intune to support managed configuration for Android devices.

Sign in to the Microsoft Endpoint Manager admin center.
Go to Apps > App configuration policies.
On the App configuration policies page, on the toolbar, select Add > Managed devices.
On the Create app configuration policy page, on the Basics tab, set the following fields:
- Name – Enter a name for the policy.
- Platform – Select Android Enterprise.
- Profile type – Select the device profile types that the app configuration profile applies to.
- Targeted app – Select the Select app link. In the Associated app dialog box, select the Warehouse Management app in the list, and then select OK to apply the setting and close the dialog box.
Select Next to continue.
On the Settings tab, in the Permissions section, select Add.
In the Add permissions dialog box, select the checkboxes for Camera, External storage (read), and External storage (write). Then select OK to close the dialog box and add those permissions to the Settings tab.
In the Permission state field for each permission that you just added, select Auto grant.
In the Configuration Settings section, in the Configuration settings format field, select Use configuration designer.
In the Configuration Settings section, select Add.
In the dialog box, select the checkbox for ConnectionsJson. Then select OK to close the dialog box.
A new row is added to the grid in the Configuration Settings section of the Settings tab. The Configuration key field is set to ConnectionsJason. In the Value type field, select String. Then, in the Configuration value field, paste the entire contents of the JSON file that you created in the Create a connection JSON file section.
Select Next to continue.
On the Assignments tab, add the user groups and/or devices that the configuration policy should apply to. For information about how to use the settings, see Add app configuration policies for managed Android Enterprise devices.
When you've finished, select Next to continue.
On the Review + save tab, review your settings. If they look correct, select Create to save them.

Set up Intune to support managed configuration for Windows devices

Follow these steps to set up Intune to support managed configuration for Windows devices.

Sign in to the Microsoft Endpoint Manager admin center.
Go to Devices > Windows.
On the Windows devices page, on the Configuration profiles tab, on the toolbar, select Create profile.
In the Create a profile dialog box, set the following fields:
- Platform – Select Windows 10 and later.
- Profile type – Select Templates.
- Template name – Select Custom.
Select Create to apply your settings and close the dialog box.
On the Custom page, on the Basics tab, enter a name for the configuration profile, and then select Next to continue.
On the Configuration settings tab, select Add.
In the Add Row dialog box, set the following fields:
- Name – Enter a name for the new row.
- Description – Enter a short description for the new row.
- OMA-URI – Enter the following value:
```
./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/Microsoft.WarehouseManagement_8wekyb3d8bbwe/AppSettingPolicy/ConnectionsJson
```
- Data type – Select String.
- Configuration value – Paste the entire contents of the JSON file that you created in the Create a connection JSON file section.
Select Save to apply your settings and close the dialog box.
Select Next to continue.
On the Assignments tab, add the user groups and/or devices that the configuration profile should apply to.
When you've finished, select Next to continue.
On the Applicability rules tab, you can limit the set of devices that the configuration profile applies to. To apply the profile to all qualifying Windows devices, leave the fields blank. For more information about how to use the settings, see Create a device profile in Microsoft Intune.
When you've finished, select Next to continue.
On the Review + save tab, review your settings. If they look correct, select Create to save them.

Set up Intune to support managed configuration for iOS devices

Follow these steps to set up Intune to support managed configuration for iOS devices.

Sign in to the Microsoft Endpoint Manager admin center.
Go to Apps > App Configuration policies.
On the App configuration policies page, on the toolbar, select Add > Managed devices.
On the Create app configuration policy page, on the Basics tab, set the following fields:
- Name – Enter a name for the app configuration profile.
- Platform – Select iOS/iPadOS.
- Profile type – Select the device profile types that the profile applies to.
- Targeted app – Select the Select app link. In the Associated app dialog box, select the Warehouse Management app in the list, and then select OK to apply the setting and close the dialog box.
Select Next to continue.
On the Settings tab, in the Configuration settings format field, select Use configuration designer.
In the grid at the bottom of the page, set the following fields for the first row:
- Configuration key – Enter ConnectionsJson.
- Value type – Select String.
- Configuration value – Paste the entire contents of the JSON file that you created in the Create a connection JSON file section.
Select Next to continue.
On the Assignments tab, add the user groups and/or devices that the configuration policy should apply to. For information about how to use the settings, see Add app configuration policies for managed iOS/iPadOS devices.
When you've finished, select Next to continue.
On the Review + save tab, review your settings. If they look correct, select Create to save them.

Enroll devices with Intune

Each device that you want to manage by using Intune must be enrolled with the system. Enrollment involves registering with Intune and applying organizational policies for security. The Company Portal app is accessible on multiple devices and can be used to enroll devices, depending on the type of device and the platform. The enrollment programs provide access to work or school resources.

Android and iOS devices

To enroll an Android or iOS device, install the Intune Company Portal app on it. The local user must then sign in to the Company Portal app by using their company account.

Windows devices

There are several ways to enroll a Windows device. For example, you can install the Intune Company Portal app on it. For information about how to set up the Company Portal app and how to use the other options that are available, see Enroll Windows 10/11 devices in Intune.

Share via