Step 1: Microsoft Intune - Add to UEM

Microsoft Intune (Intune) is a cloud-based enterprise mobility management (EMM) service that helps you manage and secure your mobile devices, apps, and the information available to users in your network. You can access Intune in the Microsoft Azure portal. Intune supports KSP. This section provides instructions on how to set up KSP in Intune.

Before you begin

Before you begin, however, ensure that you have:

1. Access to the Microsoft Intune console in the Microsoft Azure portal.
2. Linked your Microsoft Intune console with a Managed Google Account. Linking to a Managed Google Account lets you deploy apps and policy changes to Android Enterprise devices.
3. Enrolled eligible devices and applied any necessary enterprise policies.

For more information on logging in to and setting up Intune, see Microsoft Intune documentation.

Set up KSP

To use KSP with Intune, you need to first add it as a client app.

1. Log in to the Microsoft Azure portal.
2. On the left hand navigation menu, click Intune. The Microsoft Intune Overview page opens to show a second navigation menu next to the left hand navigation menu.
   
3. In the middle navigation menu that opens, click Client apps > Managed Google Play. The Client apps - Managed Google Play page opens.
   
4. Click Open the managed Google Play Store. The Managed Google Play Store you linked to Intune opens in a new browser tab.
   
   
5. In the Search bar at the top of the page, search for Knox Service Plugin. The Managed Google Play Store page refreshes to show Knox Service Plugin as the first result.
6. Click Knox Service Plugin. The KSP app page opens.
7. Click APPROVE. The Approval Preferences - Approval Settings dialog opens.
   
   
   
8. Follow on-screen instructions to add KSP as an approved app. You have now added KSP as an approved app.
   
   

Next steps - Configure KSP

Now that you've set up KSP in Intune, you need to configure the policies you want to use.