Microsoft Device Compliance: Library Item Configuration

By Emalee Firestein

Learn how to add and configure the Microsoft Company Portal Auto App and required settings for MSDC

Microsoft Company Portal Auto App

To ensure device compliance, end users need to register their Mac with Microsoft using the Company Portal app. To install the Microsoft Company Portal on macOS devices, visit the Kandji Library.

Add a Company Portal Library Item

  1. Navigate to Library in the left-hand navigation bar.
  2. Click Add New on the top-right, and choose Company Portal.
  3. Click Add & Configure.
  4. Optionally, assign a Label.
  5. Assign to your desired Assignment Maps or Classic Blueprints. If this is the first time deploying MSDC, it is a good idea to deploy to a test blueprint scoped to a limited number of macOS devices so that you can see how it functions when deployed. 
  6. For the Installation type, choose Install and continuously enforce.
  7. Select an option from the Version Enforcement dropdown. Your options include the following:
    • Do not manage updates
    • Automatically enforce new updates
    • Manually enforce a minimum version
  8. Click Save
For additional information on settings and options for Auto Apps, please refer to the Auto Apps Overview support article.

Once the Microsoft Company portal is installed on the Mac, the Kandji agent will attempt to launch the app automatically, following a specific process required by Microsoft, so that end users can begin the registration process. For more information about what users should expect, see our Microsoft Device Compliance: User Experience support article.

Kandji Single Sign-on Extension

This step is only needed if the Microsoft Sign Sign-on Extension is not already deployed in your environment for configured device platforms.

Set up and deploy Microsoft Single Sign-on Extension settings for configured device platforms. You can deploy the required settings using the Kandji Single-On Extension Library item or via a Custom Profile Library Item where you can upload a .mobileconfig file.