Shared iPad and Office 365 Multiuser login help

Question

Hi all
Trying to configure Shared iPad with Apple Business Manager and InTune. Have got it setup and working for the first user login, but when I sign in a second user, I can access Onedrive login for all apps, but Outlook will only see the work email account added to the first primary user, I cannot add the second user email account.

Answer 1

It seems that that app protection policy with Outlook that restrict the second user to log in. Please check if the Outlook app has met the following requirements:
• The end user must have the Outlook mobile app installed to their device.
• The end user must have an Microsoft 365 Exchange Online mailbox and license linked to their Azure Active Directory account.

https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy#outlook-mobile-app

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

I am not using anyappp protection policies yet. Outlook and all the other office apps get installed OK and I can log the user into OneDrive, Teams etc. Outlook gves the option to add the account of the first logged in user. The user has an exchange account.

Also noticed the Company Portal when opened wants to go through the management process again and install the Management profile.

Answer 3

Thanks, I have now fixed this as on another forum someone suggested I did not need the company portal app on shared ipads. I think this was the issue as I logged into the company portal with the first user and then the second user could not access outlook account.
Since then I have re-deployed iPad without the company portal and both users can access outlook accounts OK.

Answer 4

Hi Craig, could you post a link to that forum post?

I've yet to gotten this user-experience friendly. Do you also need all users to use the Microsoft Authenticator app first to "enroll" the device?

My user experience is the following:

User signs in the first time and is prompted to sign in using AzureAD

User is asked to create a 8 char passcode with uppercase and lower case - This kind of defeats the purpose of the AzureAD integration as they now have a another non-linked password to be used with the shared iPads. I am also unable to change this to something less complex.

User signs in

When starting Teams for example, they get an error message saying the device is not enrolled properly

They have to first launch Microsoft Authenticator, skip all the first loading pages, go to settings, enroll using their own account - Now their AzureAD password and not the Apple password.

Relaunch Teams, and its now working.

Is this really the correct end-user experience?

Answer 5

Hi, I haven't had to use the Authenticator app or portal.
That is the same sign in experience I have, don't think there is any way around the passcode.
When launching Teams and Outlook the default account is automatically found and you just have to add it - I don't think it asks for password.
OneDrive and SharePoint add the account without any user interaction.
I am setting my apps as required with a configuration profile to add relevant apps to dock and that all seems to work now.

This was what I posted on other forum