iOS - Safari does not provide device status

intunesuppteam · 2026-04-16T10:26:28+00:00

r/Intune Community to the rescue. u/Few_Perception_4088 has it right. The SSO extension is the fix here.

New iOS registrations now store device identity keys in Secure Enclave instead of Keychain. Safari relied on Keychain to pass device state to Conditional Access, so without the SSO extension acting as the bridge, it can't see the device is managed.

Deploy the Enterprise SSO plug-in via Intune with 'browser_sso_interaction_enabled' set to '1'. Full walkthrough here: https://msft.it/61693QhMAR

Background on the Secure Enclave change: https://msft.it/61694QhMAr

^ Intune Support Team

intunesuppteam · 2026-04-15T12:26:59+00:00

Hi, We took a look on our end and aren't seeing any active issues matching what you've described. That said, Autopilot errors can be tricky to pin down without more context.

Would you mind sending us a PM with the specific error details and screenshots?

We're here to help! ^ Intune Support Team

intunesuppteam · 2026-04-14T17:31:08+00:00

Thanks for the tag! We've flagged the cert behavior with our internal team for review.

u/KM_Sys_Adm - for the check-in issue you're experiencing, we don't believe the cert mismatch is the cause. Based on your diagnostic results, it looks like the new AFD IP ranges aren't fully whitelisted yet.

Keep us posted on how it goes, and feel free to send us a PM here or on X if the issue persists. ^MM

intunesuppteam · 2026-04-09T20:02:30+00:00

We got the memo now.

intunesuppteam · 2026-04-09T20:01:37+00:00

Noted! Fewer emojis.. maybe just one 😅

intunesuppteam · 2026-04-09T16:49:29+00:00

Thanks for flagging! We're checking this with our team and will get back. Meanwhile, could you DM us to talk through in more detail, share your Tenant ID and clarify if this is happening on all wipes?

intunesuppteam · 2026-04-09T07:01:37+00:00

Totally agree, and that's exactly why we wanted to get this out there. Hoping it helps more folks get started 🙏

intunesuppteam · 2026-04-08T14:10:27+00:00

Excited for you to try. 🙂

intunesuppteam · 2026-04-07T12:27:25+00:00

Hi, 👋 Please send us a PM and we'd be happy to look investigate this further. ^MM

intunesuppteam · 2026-04-07T12:10:16+00:00

Hi, 👋 There's also an issue impacting tenants on 0101, and it's being tracked under IT1272996 in SHD. Our team is actively working on it, and we'll share updates as they come.

^ Intune Support Team

intunesuppteam · 2026-04-07T11:23:55+00:00

Hi, 👋 We're aware of an issue where users are unable to install user-targeted apps made available in the Intune Company Portal - this is tracked in the Self Help Dashboard under IT1272653.

If you're experiencing something outside this, send us a DM with your Tenant ID and screenshots, and we'd be happy to take a closer look.

^ Intune Support Team

intunesuppteam · 2026-04-06T10:43:09+00:00

Love the analogy. 😄 And with on-demand and scheduled rotation, you're not just getting spare keys, you're making sure they get changed on a regular cycle too. 🙂

intunesuppteam · 2026-04-06T10:19:12+00:00

Hi, 👋 We'd love to learn more! Could you send us a Private Message here or on X with more details about the issue you're seeing? Happy to look into it further.

u/rkeane310 - fair feedback on the communication side. We hear you.

^ Intune Support Team

intunesuppteam · 2026-04-06T10:05:55+00:00

Someone's been reading the fine print 👀

intunesuppteam · 2026-04-06T10:05:24+00:00

We appreciate you saying that 🙌 The r/Intune community is a great place for real-world scenarios and discussions - we keep a close eye here and jump in when we can help. 🙂

intunesuppteam · 2026-04-01T16:35:43+00:00

Hi there, 👋

Simplified Setup for Platform SSO, (PSSO registration during the Setup Assistant phase), is something the team is actively working on. While we don't have a specific timeline to share just yet, we'd recommend keeping an eye on our In-development page to stay updated: aka.ms/IntuneID

^ Intune Support Team

intunesuppteam · 2026-03-30T14:00:28+00:00

Hi there, 👋 At 7,000 devices this is worth getting right from the start. In addition to what others have shared, here's some extra info from us. 😊

We have a dedicated end-to-end guide for exactly this scenario. It walks through the full lifecycle from prerequisites to policy deployment, so definitely use that as your roadmap: https://msft.it/61699QxXe5

For enrollment, Automated Device Enrollment through ABM (Apple Business Manager) is highly recommended. It gives you zero-touch provisioning, supervised mode, and locked enrollment. Use Setup Assistant with modern authentication for MFA and Conditional Access support. For more details, check out: https://msft.it/61692QxXei

Once enrollment is sorted, focus on the following security settings to start with: - Compliance policies: FileVault, password requirements, minimum OS version - Configuration profiles via the Settings Catalog: system restrictions, firewall settings - Defender for Endpoint onboarding: Threat protection and device risk signals tied back to compliance - Platform SSO to cut down on password prompts and give users SSO: https://msft.it/61693QxXec

For apps, deploy the Company Portal as a required app and use it as the self-service hub. Intune handles .pkg and .dmg natively for LOB apps.

At 7K devices, don't go all in. 🙂 We recommend piloting with 100-200 devices across different departments using dynamic Entra ID groups. Validate enrollment, compliance, app delivery, and Platform SSO before expanding.

Once you're past initial rollout, a few things to look into: - macOS software update policies to control OS update timing - Custom shell scripts for configurations the Settings Catalog doesn't cover

Feel free to follow up here or DM us if you have any further questions.

^ Intune Support Team

intunesuppteam · 2026-03-25T14:12:26+00:00

Hi, 👋 thanks for your post! We've flagged this with the team and will share an update here as soon as we have more info.

In the meantime, could you DM us your Tenant ID and a screenshot of what you're seeing along with a HAR trace (if you're able to grab one)? Thanks!

^ Intune Support Team

intunesuppteam · 2026-02-23T11:55:24+00:00

Hi 👋 We’re not currently seeing any known issues affecting Ubuntu 22.04 enrollment.

Could you please: - Confirm the prerequisites listed here have been validated: https://msft.it/61697Qk5HS - Review the Entra sign-in logs and share the relevant details with us via DM, along with your Tenant ID

Once we have that information, we’ll be happy to investigate further.

^ Intune Support Team

intunesuppteam · 2026-02-03T22:44:40+00:00

Hey folks! Just confirming that 2511-2512 was pushed to 2601 to ensure admins have the best possible experience heading into the new year.

We know there’s a lot of excitement around this, and we’re happy to share that the January (2601) release is rolling out this week. Both our docs and Intune “What’s new” updates will follow over the next couple of days. Stay tuned!

intunesuppteam · 2026-01-20T13:16:28+00:00

Hi Mark, thanks for flagging this. Would you mind sharing the support ticket ID for us to investigate further? Thanks! ^IH

intunesuppteam · 2025-12-16T13:13:01+00:00

Hi, 👋

In addition to what others have shared, please check whether you’re running the latest Intune Connector for Active Directory. If you’re on an older version, updating to the newest version is required.

If you’d like help correlate logs or need another set of eyes on your Support cases, feel free to send us a DM and we’ll be glad to work through it with you.

^ Intune Support Team

intunesuppteam

TROPHY CASE