How to setup Intune to work with the LMS365 mobile app

Introduction

LMS365 mobile app can be deployed using Microsoft Intune to help you control access and protect your data. Being part of Microsoft's Enterprise Mobility + Security (EMS) suite Microsoft Intune integrates with your Azure Active Directory (AAD) and Azure Information Protection allowing you to keep your organization’s information protected on all the devices of your users with the policies you create.

This article describes how to set up Microsoft Intune to work with the LMS365 mobile app.

IMPORTANT: We don’t support Microsoft Intune App Policies.
If you use your own app or SharePoint/mobile browser, you should understand that LMS365 is deployed as three AD Applications within your AAD. These applications are always impacted by your Security Policies but can be excluded since you don’t expose any threat but how AAD Authentication is implemented.
We use Conditional Access Policies and also deploy the LMS365 mobile app using Microsoft Intune internally for IOS and Android phones.

Setting up Intune

To set up Microsoft Intune, please perform the following steps:

1) Configure Conditional Access Policies - Fill in the options you need. Below is an example of setting up policies for Android for a specific user and requiring multi-factor authentication.

Microsoft Endpoint Manager admin center

Sign in to the Microsoft Endpoint Manager admin center > Endpoint security > Select Conditional Access > choose +New policy > Enter a name for the policy.

Azure Active Directory admin center

Go to the Azure Active Directory admin center > Dashboard > Conditional Policies > Under Assignments, select Users and groups > select users and groups radio button. Check the box for Users and groups, then select to browse the available Azure AD users and groups.

Select Cloud apps or actions. You can choose to apply the Conditional Access policy to All cloud apps or Select apps. To provide flexibility, you can also exclude certain apps from the policy. 

Select Conditions. Choose Select, then browse the list of available sign-in events that can be used. To apply the select apps, choose Select, then Done.

Under Access controls, choose Grant, then make sure the Grant access radio button is selected.

Check the box for Require multi-factor authentication (The user will need to complete additional security requirements, like a phone call or text) and Require device to be marked as compliant (The device must be Intune compliant. If the device is noncompliant, the user will be given the option to enroll the device in Intune), then choose Select.

• "Require approved client app"  and " Require app protection police" settings are not supported by LMS365.

2) Add your mobile store apps to Microsoft Intune:

You can add an Android store app to Intune from the Azure portal by doing the following:

Go to the Microsoft Endpoint Manager admin center.
Select Apps > All apps > Add. In the Select app type pane, under the available Store app types, select Android store app. Click Select.

To configure the App information for the Android app, navigate to the Google Play store and search for the LMS365 app you want to deploy. Display the app page and make a note of the app details.
In the App information page, add the app details:

Name: LMS365.
Description: LMS365 mobile app provides easy access to all courses a learner is enrolled into. On their mobile device, learners can at any time and from anywhere view courses they completed, are in progress and courses not yet started..
Publisher: Enter the name of the publisher of the app.
Appstore URL: https://play.google.com/store/apps/details?id=com.elearningforce.LMS
Minimum operating system: In the list, select the earliest operating system version on which the app can be installed. If you assign the app to a device with an earlier operating system, it will not be installed.
All other fields are optinally.

Click Next to display the Assignments page.

Select the group assignments for the app.

For more information, see Add groups to organize users and devices https://docs.microsoft.com/en-us/mem/intune/fundamentals/groups-add.

Click Next to display the Review + create page. Review the values and settings you entered for the app.

When you are done, click Create to add the app to Intune.
The Overview blade of the app you've created is displayed:

To add an IOS store app to Intune from the Azure portal by doing the following: https://docs.microsoft.com/en-us/intune/apps/store-apps-ios 

How it will look like:

3) Download Microsoft Intune app/ Company portal app on your mobile, log in and set up access for your account.

4) Download LMS365 mobile app and enjoy using : ) 

If you face some issues with log in, please, check Sign-ins status and open Details: