{"id":110988,"date":"2018-11-08T08:17:24","date_gmt":"2018-11-08T16:17:24","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/"},"modified":"2018-11-08T08:17:24","modified_gmt":"2018-11-08T16:17:24","slug":"mam-flow-mobile","status":"publish","type":"power-automate","link":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/","title":{"rendered":"Introducing Mobile Application Management (MAM) support for Microsoft Flow Mobile Application"},"content":{"rendered":"

We have recently shipped a new version of the Microsoft Flow mobile application for Apple iOS and Android that supports Microsoft Application Management (MAM) without device enrollment. Using MAM allows IT administrators to create and enforce mobile data policies to safeguard company data.<\/p>\n

Why is this important?<\/strong>
\nWhether a customer has adopted a Bring Your Own Device (BYOD) strategy or is providing employees with a corporate phone, they are looking for more control over the data that resides on a mobile device. Organizations may want to restrict how data moves on the device and ensure the data is removed, should the employee leave the organization.<\/p>\n

What is MAM?<\/strong>
\nMAM allows organizations to create policies that govern how an application is used within a tenant. This can include enforcing app data encryption, limiting the ability to copy\/extract data to only approved applications or enforcing a PIN on a device can be implemented.<\/p>\n

Does my device need to be enrolled?<\/strong>
\nIntune MAM without enrollment does not require a user to enroll their device in Intune MDM. However, the Company Portal application needs to be installed on the device to enforce policies. A user does not need to sign-in to the company portal application for MAM to function. The Company Portal application can be downloaded from the Apple and Android app stores.<\/p>\n

\"\"<\/p>\n

What version of the Microsoft Flow mobile app is required?<\/strong>
\nVersion 2.31.0 of the app is required. Our deployments for iOS have reached 100% coverage to all regions. For Android, we are staging our rollout so there may be a delay in this version of the app being available.<\/p>\n

How can I setup a MAM policy?<\/strong>
\nAn administrator can create polices from the Azure portal. For the purpose of this blog post, we will create an App protection policy that enforces a flow user to require a pin when using the Microsoft Flow mobile application.<\/p>\n

\u2022 From the Azure portal, navigate to Intune App Protection<\/strong>.<\/div>\n
\u2022 Click on App protection policies \u2013 Create Policy.<\/strong><\/div>\n
\u2022 An Add a policy<\/strong> form will appear which requires a Name, Description and Platform.<\/div>\n
\"\"<\/div>\n
\n
\u2022 We now need to select an application that we want to manage. Currently, the Microsoft Flow application can be identified as one of the following.\u00a0<\/div>\n
\u00a0 \u00a0com.microsoft.procsimo\u00a0 (iOS)<\/strong><\/div>\n
\u00a0 \u00a0com.microsoft.flow (Android)<\/strong><\/div>\n
\u00a0<\/div>\n
Note:<\/strong> A more friendly \u201cMicrosoft Flow\u201d display name will appear in this experience later this month.<\/div>\n
\u00a0<\/div>\n

\u2022 Ensure the appropriate application is selected based upon the platform that you are trying to target. If you do not find it in the list of apps, search for it by typing in the appropriate value into the Bundle ID <\/strong>field. Click the Add<\/strong> button to add this application as a required app and then click Select<\/strong> to complete this configuration.\u00a0<\/p>\n

\"\"<\/p>\n

    \n
  • We now need to define our policy that will impose specific application behaviors by clicking on Configure required settings<\/strong>.<\/li>\n
  • Within the Configure require settings<\/strong> experience, there are 3 areas that we need to configure: Data relocation<\/strong>, Access requirements<\/strong> and Conditional launch<\/strong>.<\/li>\n
  • Let\u2019s start with the Data relocation <\/strong>settings. Since the flow app is not used to generate local data, we can use the default policy.<\/li>\n<\/ul>\n

    Note:<\/strong> This policy has been used as an example. Please modify to meet your organization\u2019s needs.\u00a0<\/p>\n

    \"\"<\/p>\n

    \u2022 Next, we are going to focus on Access requirements<\/strong> and can establish a policy like the one below. Once we are done configuring our Access requirements<\/strong> we can click on the Ok<\/strong> button.<\/p>\n

    \"\"<\/p>\n

    Note:<\/strong> When testing you can lower the Recheck the access requirements after (minutes) setting to reduce the amount of time you need to wait for a prompt.<\/p>\n

    \u2022 In addition, we can also provide a Conditional launch<\/strong> configuration. For the purposes of this blog post we will keep the default policy and can click OK to complete this interaction.<\/div>\n
    \u2022 Click OK<\/strong> to close the Settings<\/strong> panel.<\/div>\n
    \u2022 Click Create<\/strong> to finalize the policy.<\/div>\n
    \u2022 Within our policy list we should now see the policy that we just created.<\/div>\n
    \u2022 We now need to assign Azure AD groups for which this policy should apply. We can assign access by clicking on our policy and then by clicking on Assignments<\/strong>.<\/div>\n
    \u00a0<\/div>\n
    \"\"<\/div>\n
    \u00a0<\/div>\n

    To select an Azure AD group(s), click on Select groups to include<\/strong> and then select the appropriate group. For this purpose, I have created an Azure AD group and included members for whom I want these policies applied to.<\/p>\n<\/div>\n

    Testing<\/strong><\/div>\n
    \n
    We can now go ahead and test our MAM policy by logging into the Microsoft Flow mobile app and follow these instructions:<\/div>\n
    \u2022 Ensure you have the latest version of the iOS or Android app (version 2.31.0<\/strong>)<\/div>\n
    \u2022 Close the Microsoft Flow mobile app<\/div>\n
    \u2022 Launch Microsoft Flow mobile app<\/div>\n
    \u2022 You should be prompted with the following message indicating that \u201cYour organization is now protecting its data in this app.\u201d<\/div>\n
    \"\"<\/div>\n
    \u00a0<\/div>\n

    \u00a0<\/p>\n<\/div>\n

    \u2022 Since we opted to allow finger prints when we created our policy, we have the ability to provide our finger print.<\/div>\n
    \u00a0<\/div>\n
    \"\"<\/div>\n
    \u2022 Otherwise, a user will be required to setup and provide a PIN number.<\/div>\n
    \"\"<\/div>\n
    \u00a0<\/div>\n
    Conclusion<\/strong><\/div>\n
    MAM support has been a key ask by our customers who are using Intune App Protection to manage company data on mobile devices. By providing this support, we are aligning with Microsoft customer promises to ensure that organizations have a consistent way to manage their mobile data.<\/div>\n

    \u00a0<\/p>\n

    \u00a0<\/p>\n

    \u00a0<\/p>\n

    \u00a0<\/p>\n

    \u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

    We have recently shipped a new version of the Flow Mobile application for Apple IOS and Android that supports Microsoft Application Management (MAM) support without device enrollment. Using MAM allows IT administrators to create an enforce mobile data policies to safeguard company data.<\/p>\n","protected":false},"author":349,"featured_media":0,"comment_status":"open","ping_status":"open","template":"","power-automate-category":[2752,2836],"power-automate-tag":[2439,2533,2680],"coauthors":[2910],"class_list":["post-110988","power-automate","type-power-automate","status-publish","hentry","power-automate-category-product-updates","power-automate-category-walkthroughs","power-automate-tag-admin","power-automate-tag-data-protection","power-automate-tag-mobile"],"yoast_head":"\nIntroducing Mobile Application Management (MAM) support for Microsoft Flow Mobile Application - Microsoft Power Platform Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Introducing Mobile Application Management (MAM) support for Microsoft Flow Mobile Application - Microsoft Power Platform Blog\" \/>\n<meta property=\"og:description\" content=\"We have recently shipped a new version of the Flow Mobile application for Apple IOS and Android that supports Microsoft Application Management (MAM) support without device enrollment. Using MAM allows IT administrators to create an enforce mobile data policies to safeguard company data.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Power Platform Blog\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2024\/06\/1-companyportal.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 min read\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Kent Weare\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/\",\"name\":\"Introducing Mobile Application Management (MAM) support for Microsoft Flow Mobile Application - Microsoft Power Platform Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2024\/06\/1-companyportal.png\",\"datePublished\":\"2018-11-08T16:17:24+00:00\",\"dateModified\":\"2018-11-08T16:17:24+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2024\/06\/1-companyportal.webp\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2024\/06\/1-companyportal.webp\",\"width\":247,\"height\":242,\"caption\":\"icon\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Power Automate\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Introducing Mobile Application Management (MAM) support for Microsoft Flow Mobile Application\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/\",\"name\":\"Microsoft Power Platform Blog\",\"description\":\"Innovate with Business Apps\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#organization\",\"name\":\"Microsoft Power Platform Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2020\/03\/Microsoft-Logo-e1685482038800.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2020\/03\/Microsoft-Logo-e1685482038800.png\",\"width\":194,\"height\":145,\"caption\":\"Microsoft Power Platform Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Introducing Mobile Application Management (MAM) support for Microsoft Flow Mobile Application - Microsoft Power Platform Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/","og_locale":"en_US","og_type":"article","og_title":"Introducing Mobile Application Management (MAM) support for Microsoft Flow Mobile Application - Microsoft Power Platform Blog","og_description":"We have recently shipped a new version of the Flow Mobile application for Apple IOS and Android that supports Microsoft Application Management (MAM) support without device enrollment. Using MAM allows IT administrators to create an enforce mobile data policies to safeguard company data.","og_url":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/","og_site_name":"Microsoft Power Platform Blog","og_image":[{"url":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2024\/06\/1-companyportal.png","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 min read","Written by":"Kent Weare"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/","url":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/","name":"Introducing Mobile Application Management (MAM) support for Microsoft Flow Mobile Application - Microsoft Power Platform Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2024\/06\/1-companyportal.png","datePublished":"2018-11-08T16:17:24+00:00","dateModified":"2018-11-08T16:17:24+00:00","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2024\/06\/1-companyportal.webp","contentUrl":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2024\/06\/1-companyportal.webp","width":247,"height":242,"caption":"icon"},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/mam-flow-mobile\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/"},{"@type":"ListItem","position":2,"name":"Power Automate","item":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/power-automate\/"},{"@type":"ListItem","position":3,"name":"Introducing Mobile Application Management (MAM) support for Microsoft Flow Mobile Application"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/","name":"Microsoft Power Platform Blog","description":"Innovate with Business Apps","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#organization","name":"Microsoft Power Platform Blog","url":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2020\/03\/Microsoft-Logo-e1685482038800.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-content\/uploads\/2020\/03\/Microsoft-Logo-e1685482038800.png","width":194,"height":145,"caption":"Microsoft Power Platform Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/#\/schema\/logo\/image\/"}}]}},"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Power Platform Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-json\/wp\/v2\/power-automate\/110988"}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-json\/wp\/v2\/power-automate"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-json\/wp\/v2\/types\/power-automate"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-json\/wp\/v2\/users\/349"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-json\/wp\/v2\/comments?post=110988"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-json\/wp\/v2\/power-automate\/110988\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-json\/wp\/v2\/media?parent=110988"}],"wp:term":[{"taxonomy":"power-automate-category","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-json\/wp\/v2\/power-automate-category?post=110988"},{"taxonomy":"power-automate-tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-json\/wp\/v2\/power-automate-tag?post=110988"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/wp-json\/wp\/v2\/coauthors?post=110988"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}