Frequently Asked Questions

Intune Enrollment for Android

Check your device’s operating system version

MGB requires that Android devices run Android 12 or newer.

To check your version of Android you can follow these steps

• 1. Open your device's Settings app.
• 2. Tap About phone or About tablet Android version.
• 3. Find your "Android version”

If you need to update your device, you can follow these steps

• 1. Open your device's Settings app.
• 2. Tap System Software update. You'll find your update status.
• 3. Follow the on-screen instructions.

Tip: If you have a Pixel device, it may say "Software updates" or “System update."

Unenroll from Ivanti Go (MobileIron)

If you previously enrolled your device with Ivanti Go, you will need to unenroll your device before proceeding. You can skip this step if you have never enrolled your device with Ivanti Go

Follow these steps to unenroll your device.

• 1. Go to the Ivanti Go Self Service website
• 2. Login with your Mass General Brigham Email Address
• 3. Authenticate via Okta using your Mass General Brigham Credentials (Username and Password)
• 4. Select Retire
• 5. Check the box next to Are you sure you want to retire this device?
• 6. Press Yes, retire this device
• 7. The Ivanti Go device management will be removed from the device, as well as related Mass General Brigham applications and profiles that installed as part of MobileIron.

Enroll in Intune

• 1. Install the Intune Company Portal app from the Google Play Store.
• 2. Open the Company Portal app on your personal device. Click Allow when prompted to allow Company Portal to send you notifications.

• 3. Click Sign In after allowing notifications.

• 4. From the Microsoft Intune Sign in screen, enter your MGB email and click Next.

• 5. From the OKTA Mass General Brigham login screen, enter your MGB Username and Password, then click Sign In.

• 6. Next, complete your Two-Factor Authentication via Okta Verify, SMS Authentication or Voice Call Authentication.

• 7. From the Mass General Brigham Access Setup screen, click Begin.

• 8. Click Continue

• 9. Your device will now create your work profile. Click Accept & Continue

• 10. Click Next

• 11. Once your work profile is created, click Continue to activate the work profile.
• a. Please Note: If this step fails, please see KB0041867 TRBL: Failure creating work profile on Android devices.

• 12. Once your work profile is activated, click Continue to update device settings.

• 13. Your device will now go through its Checking device settings phase. During this phase, you may be prompted to address some compliance issues before your enrollment can be completed.
• 14. Click Confirm Device Settings to verify that the settings are compliant.

• 15. Once completed, you will see the message, You’re all set! Click the back arrow at the top of the window.
• 16. You’ve now successfully enrolled your device into Intune! The Company Portal app will now make MGB corporate applications available to you that you can consume from your personal device.

Please Note: Applications may take upwards of 60 minutes, depending on your connectivity and the Intune synchronization time, which will vary. Important applications to reinstall may include Outlook and Voalte Me. You can find a complete list of BYOD-approved applications by clicking here.

15. Optional: For an improved user experience, we recommend enabling Androd's One Lock feature. Please click on the following KB for instructions: KB0041771 How To: Intune - Enable One Lock for Android Work Profile Devices