Microsoft Authenticator flows down mandatory without any control to Work-Profile

Question

Our customer uses Work-profiles in their Android phones and they tend to install MS Auth app manually to their Personal Desktop. In Intune, Auth App is synced but not assigned anymore. Still, when user enrolls the phone, Auth App appears to Work Desktop. Our customer wants MS app not to flow down to Work desktop in Android. I have enrolled my test android phone to their tenant and I see myself that MS auth app is enrolled from somewhere, but where and how I can stop it?

Answer 1

@Pavel yannara Mirochnitchenko, Thanks for posting in Q&A. In fact, the Microsoft Authenticator will be installed automatically when you do Android Enterprise Fully Managed, Android Enterprise corporate owned with work profile or Android Enterprise Dedicated enrollment. This is by design. And can't be removed during enrollment. Here is a link list more detail for your reference:

https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work

Thanks for your understanding.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.