apple intune policy configuration push

Question

Hello,

Would like to know how intune pushes the policy configuration down to iOS device ?? I want to know exact flow and components involved in cloud and on device who catches the policy push.

Basically when Intune admin modifies or creates a new policy that is applicable to the iPhone, does intune uses apple-push-notification service and sends the whole payload on it OR is it some other means ?

And who enforces it on the on the device. In case Android we have "Android Device Policy" app. What is on Apple devices ??

Thanks.

Answer 1

@testuser7, Thanks for posting in Q&A. In General, Intune uses the Apple Push Notification service to communicate securely to your enrolled iOS devices, and Apple requires that each MDM service utilize their own certificate to establish a secure mechanism for devices to use when communicating on Apple’s push notification messaging network.

https://techcommunity.microsoft.com/t5/intune-customer-success/intune-and-the-apns-certificate-faq-and-common-issues/ba-p/280121

Your understanding is correct. When an Intune policy is created or modified, the relevant information is sent to APNs, which then pushes it to the device. Unlike Android, there isn’t a specific “Intune Device Policy” app on iOS, the enforcement of policies happens directly within the managed apps themselves.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.