OneDrive, OneNote, Teams, Office

On iOS & iPadOS 

• Import Microsoft Teams or any of the other above mentioned applications to the App Portal
• Assign your selected application to a Tag
• Click the Edit button for Managed Config
• Review the configuration keys given by Microsoft
• Review Silverback system variables 
• Paste your configuration into to the App Configuration XML area
  • Configure the following to Allow only configured organization accounts in apps

<key>IntuneMAMAllowedAccountsOnly</key>
<string>Enabled</string>
<key>IntuneMAMUPN</key>
<string>{UserName}</string>

• Save the configuration
• Assign the tag to a test device or Push the tag to your already assigned devices
• Install the application 
• Try to login with your corporate account
• Try to login or add an additional account, that is not reflecting the {UserName} variable

On Android Enterprise

• Import Microsoft Teams or any of the other above mentioned applications to the App Portal  as Managed Play application
• Assign your selected application to a Tag
• Click the Edit button for Managed Config
• Press Edit managed configuration
• Review the configuration keys given by Microsoft
• Review Silverback system variables
• The following configuration represents an individual working setup 
  • Add as Allowed Account e.g.  {UserName}

• Press Save
• Assign the tag to a test device or Push the tag to your already assigned devices
• Open Companion, navigate to Profiles and check if a Managed Configuration for Microsoft OneDrive is present 
• Install the application from Managed Google Play
• Try to login with your corporate account
• Try to login or add an additional account, that is not reflecting the {UserName} variable

App Protection Policies for iOS and Android

Several Microsoft 365 and partner applications are supporting additional app protections policies to ensure your organization's data remains safe or contained in managed apps. Please refer to Azure AD Integration VI: App Protection Policies for the integration on Android and iOS/iPadOS applications. 

On macOS

For macOS devices, the application for Microsoft Teams is handled and installed as an Enterprise application. For this you need first to download the sources from the official download area from Microsoft. Then you will need to generate a property list (*.plist) for Microsoft Edge with the provided MDMPackager tool on a macOS device. After uploading the application, you can distribute Microsoft Teams to managed macOS devices.