How to Enroll an Android Device in Intune

Stanford's Mobile Device Management (MDM) service installs profiles on your device to configure and maintain its settings, helping to protect both your privacy and the university's data.

What to expect after you enroll in MDM

Once enrolled in Stanford's MDM service, your device will: 

• Require a password to unlock it. Stanford requires a minimum password length of four digits, though some manufacturers may require a stronger password.
• Automatically time out after a period of inactivity, requiring a password to unlock it again. You can adjust the screen timeout duration in your device's display Settings. Intune will allow a screen timeout setting of up to five minutes.
• Sync your email, contacts, and calendar appointments during the first few minutes after installation, provided email activation is supported on your device.
• Check periodically to ensure it isn't compromised.
• Otherwise, perform as it did before you installed the MDM.

Before you begin

• Download the Intune Company Portal app: Before you can enroll your Android device in the MDM service, you must download the Intune Company Portal app from the Google Play Store. You'll need a Google account to do this. See Create your Google Account if you need to set one up.
• Select a password: During the enrollment process, you'll be required to set a password with a minimum of four characters on your device.
• Back up your device: Before enrolling, be sure to back up your device. Your cellular carrier typically provides a mechanism to back up your pictures, contacts, etc. Ensure this is done first to prevent any data loss.
• Check your OS version. Ensure your device is running Android OS 13 or later. You cannot enroll a device in MDM if the OS is below 12. (Android Help: Check and update your Android version)
• Questions? If you have questions, please call the UIT Service Desk at 650-725-4357 (5-HELP) or submit a Help request.

Step 1: Install the Intune Company Portal app

Before you can enroll your Android device in the MDM service, you must download and install the Intune Company Portal app from the Google Play Store on your Android device.
Note: You must use your Android device to begin enrollment.

Step 2: Enroll in MDM

After installing the Intune Company Portal app, you are ready to begin enrollment, which consists of three parts:

1. Authenticating to the Company Portal with your Stanford credentials
2. Securing grant permissions to the Company Portal and setting a passcode
3. Configuring your Stanford email account

Authenticate

1. After the Company Portal app installs, tap Open. Alternatively, you can open the app from your home screen by tapping Company Portal.

   

2. When prompted for your email address or server, enter your SUNetID@stanford.edu email address and tap Next.

   

3. You'll be asked how to sign in. Select "Certificate on this device" and tap Continue.

   

4. Enter your SUNet ID and password, and tap Login. You will also be prompted to enter a second factor for two-step authentication. 
   Note: There is typically a delay before the next page displays.

   

5. "What's Next?" for enrollment will be displayed.

   

Set up your work profile

Android work profile creates a secure space to separate your work apps from your personal data and apps. Work-related activities should be carried out via apps in your work profile.

1. Select Accept & continue to set up your work profile.

   

   

Encrypt device and complete enrollment 

1. The Company Portal will begin the encryption phase. Tap Next.

   

2. The "Devices" screen indicates that the enrollment is complete. Select OPEN to view the Work Profile Play Store.

   

3. After selecting Open you will be able to view the Work Profile Play Store and the Stanford-supported apps to add to your work profile, as needed.

   

4. The Microsoft Outlook app is installed automatically under your work profile. Open Outlook and select ADD ACCOUNT.

   

5. Intune should locate your account. Select CONTINUE to finish adding your Stanford account, then MAYBE LATER if you have no other accounts to add.

   

Step 3: Re-activate Duo

1. As a final step, you'll need to re-activate Duo. Start by navigating any two-step authentication screen (for example, go to accounts.stanford.edu and select Manage.)
2. In the lower left corner of the prompt screen, click Need help? 
   
    
3. Under "I got a new phone," click Activate Duo Mobile. 
   
    
4. Click Text me a link. 
   
5. You will receive a text message with a link. Click this link to re-activate Duo.