App Configuration

App configuration policies deliver settings to managed apps before or during launch. Use configuration policies to pre-configure apps so users do not need to enter settings manually.

Configuration Policy Types

Managed Devices

Configuration delivered through the device MDM channel. The device must be enrolled in Intune. Supports iOS/iPadOS and Android Enterprise.

Managed Apps

Configuration delivered through the Intune App SDK. Works with or without device enrollment.

Creating a Configuration Policy

Step 1 — Select Platform

• iOS/iPadOS — Managed devices or managed apps
• Android Enterprise — Work Profile, Fully Managed, or Dedicated
• Windows — Select apps with configuration support

Step 2 — Select Target App

Choose the app that will receive configuration. Only apps supporting app configuration appear in the list.

Step 3 — Configure Settings

Configuration Designer

XML/JSON Configuration

For advanced configuration, provide raw XML (iOS) or JSON (Android) with key-value pairs.

Step 4 — Assign to Groups

Target the policy to user or device groups.

Common Scenarios

Microsoft Outlook

Pre-configure email account: email address, server URL, authentication method, default signature.

Microsoft Teams

Configure meeting settings, notification preferences, and data sharing controls.

Managed Browser / Edge

Set homepage URL, bookmarks, proxy settings, and allowed/blocked sites.

Line-of-Business Apps

Deliver API endpoints, feature flags, tenant identifiers, and environment configuration.

Tokens and Dynamic Values

• {{userprincipalname}} — User UPN
• {{mail}} — User email address
• {{partialupn}} — UPN prefix before @
• {{userid}} — Azure AD user object ID
• {{deviceid}} — Intune device ID

Monitoring

• Succeeded — Policy applied on the device
• Pending — Policy assigned but not yet applied
• Failed — Policy could not be applied
• Not Applicable — Target app not installed

API Reference

• GET /api/devices/app-configuration — List policies
• POST /api/devices/app-configuration — Create policy
• GET /api/devices/app-configuration/:id/status — Get deployment status
• PUT /api/devices/app-configuration/:id — Update policy