Frequently asked questions about the wrap feature are listed below.
Can single tenant customers use wrap with Power Apps?
Yes. Both single tenant and multitenant customers can use wrap. When registering your app manually in Azure, ensure you select the correct account type. See App registration for directions.
Does the wrap feature in Power Apps support Customer-Managed Keys (CMK) or Lockbox capabilities?
No. The wrap feature in Power Apps doesn't support Customer-Managed Keys (CMK) or Lockbox. Wrap uses Azure DevOps build pipelines, and customer assets might be exposed to Microsoft service operators during the build process.
Can I create mobile apps with Power Apps?
Yes. See Creating mobile apps with Power Apps.
If I create a mobile app with Power Apps, does Microsoft release it for me?
No. Microsoft wraps your app in a native mobile app shell for you to digitally sign and distribute.
How do I digitally sign my mobile app?
You can automatically sign your mobile app package in Step 2 of the wrap wizard if you have set up Azure Key Vault. For manual signing, see Android, iOS, and Google Play Store.
Can I use Xcode to digitally sign my mobile apps for iOS?
No. Signing your mobile app with Xcode isn't supported in wrap. To digitally sign your wrapped mobile app package for iOS, see Code sign for iOS.
How do I distribute my mobile app?
You can use Microsoft Intune, Google Play, or Apple Business Manager.
How do I configure my mobile app for distribution through Microsoft Intune?
Wrap wizard automatically configures your app for distribution with Microsoft Intune. To troubleshoot, you can manually grant all the canvas app(s) that you intend to wrap Microsoft Mobile Application Management API permission manually. More information: Configure the API permissions for your app manually.
Do I need to rewrap and redistribute my mobile app frequently?
Power Apps Mobile is updated periodically. To ensure compatibility and benefit from bug fixes and new features, we recommend that you rewrap and redistribute your mobile app at least monthly.
Do I need to rewrap and redistribute my mobile app after making changes to the canvas app(s) included in the package?
No. Published changes to the included canvas app(s) are downloaded automatically by existing, released versions of your mobile app. However, we recommend that you rewrap and redistribute your mobile app on a monthly basis to benefit from platform bug fixes, updates, and new features.
How do I update the icons and colors in my mobile app?
Update icons and colors by rewrapping your apps with new assets and redistributing the updated mobile app package.
How do I add or remove canvas apps in my wrapped mobile app?
Add or remove canvas apps by rewrapping your mobile app package with the desired set of apps and redistributing your mobile package.
What are Primary and Secondary apps in the context of wrap?
The Primary app provides the main experience of your mobile app. Secondary apps are bundled for performance reasons and must be linked from your primary app. See wrap multiple canvas apps together.
What are the advantages of including Secondary apps in the bundle, if I can still Launch() them without doing so?
Including Secondary apps in the bundle provides better launch performance when opening them for the first time. However, it's optional. If you have many Secondary apps, you may choose not to bundle them to reduce the total app size.
Can I add apps that use Power BI data to wrap?
Yes. Wrap wizard automatically configures your mobile app to be able to use Power BI. To troubleshoot, you can manually grant Power BI API permission to all your apps that use Power BI data. More information: Configure the API permissions for your app manually.
Can I deep link into a wrapped mobile app?
Yes. You can use ms-mobile-apps:///providers/Microsoft.PowerApps/apps/<appID>?tenantId=<tenantId> schema to deep link into your wrapped mobile apps. Refer to Using deep links with wrapped mobile apps for more information.
Why do I see this error message when I try to open my wrapped native app on a mobile device: You can't get there from here error message
Your organization might have a Require Approved Client App conditional access policy that restricts access to mobile apps. To fix this issue, see Edit your conditional access policy.
Can I create B2C mobile apps with Power Apps?
No. Power Apps is a platform for business applications and uses Microsoft Entra authentication. The wrap feature wraps existing canvas apps for the same set of end users.
Do I need a premium license to package the app?
No, you don't need a premium license for wrap. However, if your APK uses certain connectors, you will need to pay according to the requirements of those connectors.
Can I delete wrap projects?
No, wrap projects can't be deleted but you can delete the project APK files from your storage location.
How can I ensure that customers outside the home tenant can't access the app even if I enable multitenant access during registration?
Users outside the home tenant can't access wrap projects unless both the Azure admin and the maker explicitly share the app with the user. The app ensures proper data separation across organizations by embedding the tenant identifier in the authentication token.
Can we allow users from outside home tenant to access wrap projects?
The Wrap App supports multi-tenancy. To enable this feature, the Azure admin must:
- Add users from outside the home tenant as guests in Azure.
- Include these guests in the Azure Conditional Access process.
- The maker must share the app with these guest IDs within Power Apps.
Why am I not able to Sign into my wrapped Application?
- Verify if the user has access to the PowerApps application. More information: Share a canvas app with your organization
- If access is confirmed, check the app's Azure conditional policies. Admin access is required to review these policies. More information: View applied Conditional Access details in the Microsoft Entra activity logs
- To troubleshoot sign-in errors, copy the correlation ID from the mobile screen where the sign-in is failing and refer How to troubleshoot Microsoft Entra sign-in errors to understand the error and the failing policies.
- Check Microsoft Entra authentication and authorization error codes.
- One common error code is 50194 (tag- 9n555). During the app registration stage, the supported account type isn't configured for multi-tenant. Configure it to support multi-tenant.
When do you need to re-wrap?
- If you're an existing customer who has already created and successfully distributed a wrapped app, you don't need to go through the wrapping process again. To ensure users receive the latest published changes, follow the steps mentioned in Power Apps for Makers: Get App Versions.
- For new customers, we recommend re-wrapping if you have completed all the registration steps mentioned in Use the wrap wizard to build your mobile app: Register app and have either manually or automatically completed the sign-in process mentioned in Use the wrap wizard to build your mobile app: Sign your mobile app package manually.
- To ensure platform changes benefit end users, we recommend re-wrapping monthly and distributing the updated app to users.
How to find your Azure admin?
- Go to the Microsoft Entra roles and administration portal. More information: Microsoft Entra admin center
- Search for global administration in the search bar.
- Select the Active assignments tab.
- Review the list of owners for the active assignments.
Why is Azure key vault a mandatory step?
The Azure key vault securely stores the access key needed for Azure blob storage.
Do you need to pay for Azure key vault & Azure blob storage?
Yes. See Key Vault pricing.
What should I do if I don't have access to the resource group while creating the key vault?
Contact your Azure tenant admin to create a key vault for you or request permission.
How can Entra B2B guest users access the wrapped apps?
- Add users from outside the home tenant as guests in Azure. See Quickstart: Add a guest user and send an invitation.
- Include these guests in the Azure Conditional Access process. Share the app with these guest IDs in Power Apps. See Share a canvas app with your organization.
- Replace the app ID and the user account in the following link:
ms-mobile-apps:///providers/Microsoft.PowerApps/apps/<appID>?tenantId=<tenantID> - Share the link with your client.
- Install the APK on Android and the IPA on iOS.
- Open the weblink and enter the external IDs to sign in.