How do we need to deploy the android application from Intune if it is not available in Google play store?

Question

How do we need to deploy the android application from Intune if it is not available in Google play store?

Muneer Jahangeer 46

We have purchased a few android applications from vendors but those are not listed in Google play store. how do we need to deploy these applications to "Corporate-owned, fully managed Android devices?"

Result:
If any android applications are deployed from Intune using "Managed google play app", no issues with the installation (100% success) whereas if i choose other options in the App type - no progress (0% success)

i.e.,

Android store app - Appstore URL is looking for google play store link. [ As mentioned, apps are not available in Play store]. N/A
Web link - - Provided the external URL in this section "App URL" . No progress /no errors/no success.

Built-in app - - we are able to deploy only microsoft apps here. so N/A.
Line-of-business app - - Imported the APK files and deployed to the enrolled device. No progress /no errors/no success.
and
Android enterprise system app - -we do not have the app package name to deploy. N/A

I also tried below options with no success,

Tried to upload the APK files in Google play private app but it error outs - Upload a new APK file with a different package name.
After enabling this option in the configuration profile, I was able to install the android applications manually but after some time, it is getting deleted automatically.

Your suggestions are really helpful. I have a couple of tickets with Microsoft but no response yet. looks like only an experienced person can answer this issue.

I'm sure this answer may help many IT engineers so please assist in this matter.

Accepted answer

1 additional answer

Your answer

Answer 1

Lu Dai-MSFT 28,496

@Muneer Jahangeer Thanks for posting in our Q&A.

For this Web link app, did you refer to the following article to add?
https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work#managed-google-play-web-links
Then please check if the status is normal in Tenant admin > Connectors and tokens > Connectors and tokens.

For line-of-business app, please understand that the app's package name must be globally unique in Google Play (not just unique within your enterprise or Google Play Developer account). Otherwise, you will receive the Upload a new APK file with a different package name error.
https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work#managed-google-play-private-lob-app-publishing-directly-in-the-intune-console

It is needed to change the package name as an unique name. And for the Intune service to successfully deploy a new APK file to the device, you must increment the android:versionCode string in the AndroidManifest.xml file in your APK package.

Hope it will give you some ideas.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Muneer Jahangeer 46 Reputation points

2022-08-22T16:42:35.11+00:00
Line of business app - Thanks for the clarification. Looks like this method doesn't suit my needs because our business apk files are not available in the play store.

Web link - Yes, followed the same steps but no progress. Sorry to double check. will this method work with Corporate-owned, fully managed user devices?

If you see my initial post, i tried this method as well "After enabling this option in the configuration profile, I was able to install the android applications manually but after some time, it is getting deleted automatically." . Do you know how it is getting deleted?

i.e., Steps followed

Installed APK manually

Launched Inune shortcut and clicked sync button

After a few minutes, app(s) deleted with the message - XX deleted by your admin.
Lu Dai-MSFT 28,496 Reputation points

2022-08-23T02:11:42.443+00:00

@Muneer Jahangeer Thanks for your update.

Web links are installable and manageable just like other Android apps. Android fully managed device supports this app type.

For app deleted automatically issue, please check if you have deployed a device restriction policy that configure "Allow access to all apps in Google Play store" to "Not configured". It will uninstall apps that were installed outside of the Managed Google Play store.
https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-android-for-work#applications

It is suggested to try to configure "Allow access to all apps in Google Play store" to "Allow" and check if it works.
Muneer Jahangeer 46 Reputation points

2022-08-23T09:50:37.8+00:00

We do not want users to install the applications on their own . That's the reason , we have not configured this option - Allow access to all apps in Google Play store. (Currently it sets to NOT ALLOWED)

The reason for allowing this option "Allow installation from unknown sources" is, as most of the android applications are not available in play store, we thought to provide the QR code to all android device holders so that they can install using the managed QR code application which was already installed.

If my approach is not a standard, Please suggest recommended steps to achieve this.
Lu Dai-MSFT 28,496 Reputation points

2022-08-24T04:34:25.47+00:00

@Muneer Jahangeer If you want to allow installation from unknown sources, the setting "Allow access to all apps in Google Play store" needs to be set to "Allow". Otherwise, this app installed from QR code will still be uninstalled.

Honestly, it seems no method that can meet all requirements.

Or it is suggested to contact google to find if there is any method to add this app in play store.

Answer 2

Muneer Jahangeer 46

I appreciate your help so much, LuDaiMSFT-0289!

I am in process of enabling this option "Allow access to all apps in Google Play store" to Allow.

Please let me know if there is any policy in Intune that we can restrict users to install ANY application from play store? i.e., user can view all applications in play store but no access to install.

Lu Dai-MSFT 28,496 Reputation points

2022-08-25T05:39:23.277+00:00

@Muneer Jahangeer I didn't find that there is any setting that can view all applications in play store but no access to install.

Please understand that what intune can do is based on what Android MDM provides. It is needed to ask Android to provide this MDM feature and then intune will have a chance to add this feature in the future.
Muneer Jahangeer 46 Reputation points

2022-08-25T10:06:24.15+00:00

Thank you very much for the clarification. the above links are explained most of my questions!
Lu Dai-MSFT 28,496 Reputation points

2022-08-26T00:45:22.137+00:00

@Muneer Jahangeer You're welcome. I'm glad to discuss with you. If you have any problem in the future, welcome to post in our Q&A.

Thanks and have a nice day. : )

Share via

How do we need to deploy the android application from Intune if it is not available in Google play store?

1 additional answer

Your answer