Microsoft endpoint manager sdk

Question

Microsoft endpoint manager sdk

mathew butterfield 41

What can you do with the microsoft endpoint sdk.

2 answers

Your answer

Answer 1

Hello,

Thank you for posting in Q&A forum.

Microsoft Terminal Point Manager is a terminal device management solution used to centrally manage and protect terminal devices in organizations, including computers, mobile devices, and IoT devices.

By using the Microsoft Terminal Point Manager SDK, developers can achieve the following functions:

Device Management: The SDK provides functions for managing terminal devices, including device registration, configuring device settings, monitoring device status, and more. Developers can use the APIs provided by the SDK to manage and control the behavior of terminal devices.

Application Management: SDK allows developers to manage applications installed and running on terminal devices. Developers can use the features provided by SDKs to distribute, update, and monitor applications to ensure that applications on terminal devices comply with organizational policies and requirements.

Security and Compliance: The SDK provides security and compliance features to protect terminal devices and related data. Developers can use the features provided by the SDK to implement security policies, encrypt data, monitor device compliance, and more.

Remote Management: The SDK allows developers to manage terminal devices remotely. Developers can use the features provided by the SDK to perform remote operations, such as locking devices remotely, erasing device data remotely, etc.

Additionally, you can also refer to Microsoft's official documentation:

Getting started with Microsoft Endpoint Manager - Microsoft Community Hub

Best regards，

Jill Zhou

If the Answer is helpful, please click "Accept Answer" and upvote it.

Kylee Kasper 20 Reputation points

2025-05-28T19:05:22.6866667+00:00

Hi Jill!

I was hoping you could provide some guidance on our use case. We are trying to configure a Conditional Access policy using Microsoft Intune that allows our customer's employees to log into our native mobile app, but blocks them from logging into the rest of the platform via a web browser on their mobile device. This mobile app uses the same credentials as the desktop platform and authenticates via an embedded browser using OAuth. Currently, if the customer is to open up access to mobile apps, it opens up access to the entire platform which presents security risks.

Our concern is that if we block browser-based login on mobile devices, it may also prevent users from logging into the app, since it uses a browser-based OAuth flow. Is there a way to configure Conditional Access to distinguish between the mobile app and a generic mobile browser login for the rest of the platform to enforce this policy?

Any guidance on how to structure these policies or leverage app-based conditions would be appreciated! We are trying to figure out if the MSAL and Intune SDK will provide this functionality.

Answer 2

Crystal-MSFT 53,991 Microsoft External Staff

@mathew butterfield, Thanks for posting in Q&A. For the SDK, is it Microsoft Intune App SDK? This is used when your app is not in protected app list but want to apply app protection policy, then you can enable your mobile app to support app protection policies with Microsoft Intune via Microsoft Intune App SDK.

https://learn.microsoft.com/en-us/mem/intune/developer/app-sdk-get-started

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2024-06-17T02:32:29.06+00:00

@mathew butterfield, Hope the above information can help. If there's anything else we can help, feel free to let us know.
Kylee Kasper 20 Reputation points

2025-05-28T19:01:59.46+00:00
Hi Crystal!

You seem like you may be able to help with my question. We’re exploring options for managing access to our native mobile suite of applications using Microsoft Intune and wanted to clarify the SDK's capabilities around conditional access and app/browser restrictions. Before proceeding with the integration to the MSAL and Intune, we have some questions we would like addressed.

Our customers have requested the ability to allow users to access our mobile apps on personal (non-corporate) devices while restricting access to our full platform via mobile browsers. This request is based on the following:

Our mobile apps are de-scoped to use a limited set of APIs and only expose non-sensitive data in the UI.

In contrast, the full platform—accessible via browser—exposes sensitive data, including PII.

Both the mobile apps and the web platform use the same Oauth and login credentials (+ SSO if deployed).

Our mobile apps initiate login through a web-based authentication flow, which then redirects back into the app upon successful token retrieval.

Given this setup, does Microsoft Intune provide a way to:

Allow access to our mobile applications on personal, non-company, devices,

While simultaneously blocking or restricting browser-based logins to the full platform on those same personal devices?

Share via

Microsoft endpoint manager sdk

2 answers

Your answer