Now booking Q1 Intune migrations — talk to an engineer.

CyberSystem
← Back to Blog

Intune App Configuration Policies: Complete Guide

Learn how to create and deploy app configuration policies in Intune for managed devices and managed apps, including iOS, Android, and Windows app settings.

By Ali Alame•
intuneapp-configurationapp-settingsmanaged-appsmanaged-devicesiosandroidwindows

App configuration policies in Microsoft Intune allow you to customize app behavior by providing settings that apps read when they launch. These policies enable you to preconfigure apps with organization-specific settings without requiring users to configure them manually.

Understanding App Configuration Policies

App configuration policies in Intune provide settings to apps that support app configuration. These policies can be delivered through Mobile Device Management (MDM) for enrolled devices or Mobile Application Management (MAM) for apps on unenrolled devices.

Policy Types

  1. Managed Devices: Policies for apps on enrolled devices
  2. Managed Apps: Policies for apps with Intune App SDK integration

Delivery Channels

  • MDM Channel: For enrolled devices using OS-specific channels
  • MAM Channel: For apps with Intune App SDK integration

For an overview, see App configuration policies for Microsoft Intune.

Creating App Configuration Policies

For Managed Devices

iOS/iPadOS Managed Devices

  1. Sign in to the Microsoft Intune admin center
  2. Navigate to Apps > App configuration policies > Create > Managed devices
  3. Select iOS/iPadOS as platform
  4. Select targeted app
  5. Configure settings using:
    • Configuration designer: Built-in settings
    • XML data: Custom XML configuration

For details, see Add App Configuration Policies for Managed iOS/iPadOS Devices.

Android Enterprise Managed Devices

  1. Navigate to Apps > App configuration policies > Create > Managed devices
  2. Select Android Enterprise as platform
  3. Select targeted app
  4. Configure settings using:
    • Configuration designer: Built-in settings
    • JSON data: Custom JSON configuration

For details, see Add App Configuration Policies for Managed Android Enterprise Devices.

For Managed Apps

iOS/iPadOS and Android Managed Apps

  1. Navigate to Apps > App configuration policies > Create > Managed apps
  2. Select platform (iOS/iPadOS or Android)
  3. Select targeted app
  4. Configure settings using key-value pairs

For details, see App Configuration Policies for Intune App SDK Managed Apps.

Configuration Methods

Configuration Designer

Use built-in configuration options:

  1. Select Use configuration designer
  2. Configure available settings
  3. Set values for each setting
  4. Review and save

Benefits:

  • Easy to use
  • Built-in validation
  • Clear setting descriptions

XML/JSON Data

Use custom configuration:

  1. Select Enter XML data or Enter JSON data
  2. Paste configuration XML/JSON
  3. Validate configuration
  4. Save policy

Benefits:

  • Advanced configuration
  • Custom settings
  • Full control

Common Configuration Scenarios

Outlook for iOS and Android

Configure Outlook settings:

Account Configuration:

  • Email server settings
  • Authentication type
  • Account setup configuration

General Settings:

  • Focused Inbox
  • Mail sync settings
  • Security settings

For guidance, see Deploying Outlook for iOS and Android app configuration settings in Exchange Online.

Microsoft Edge

Configure Edge settings:

  • Home page
  • Search engine
  • Security settings
  • Sync settings

Office Apps

Configure Office app settings:

  • Account restrictions
  • Data protection settings
  • Collaboration settings

Android Enterprise Permissions

For Android Enterprise managed devices, you can preconfigure app permissions:

  1. Create app configuration policy
  2. Select Permissions
  3. Add permissions to override
  4. Set permission state:
    • Prompt: User decides
    • Auto grant: Automatically granted
    • Auto deny: Automatically denied

Note: Some permissions cannot be auto-granted on Android 12+ for certain device types.

For details, see Preconfigure the permissions grant state for apps.

Best Practices

1. Use Configuration Designer When Possible

  • Easier to use
  • Built-in validation
  • Clear documentation
  • Less error-prone

2. Test Configuration

  • Test with pilot groups
  • Verify app behavior
  • Test on different platforms
  • Validate user experience

3. Document Settings

  • Document configuration keys
  • Record setting purposes
  • Maintain configuration log
  • Share with team

4. Avoid Conflicts

  • Use single policy per app/user
  • Review all assigned policies
  • Understand conflict resolution
  • Test policy combinations

5. Monitor Policy Status

  • Review policy assignment
  • Check app behavior
  • Monitor user feedback
  • Adjust as needed

Troubleshooting

Common Issues

  1. Settings Not Applying

    • Verify app supports configuration
    • Check policy assignment
    • Review configuration format
    • Test with different settings

  2. Configuration Conflicts

    • Review all assigned policies
    • Use single policy per app
    • Check policy precedence
    • Resolve conflicts

  3. App Not Reading Configuration

    • Verify app SDK integration
    • Check app version
    • Review configuration format
    • Test configuration manually

Additional Resources

Conclusion

App configuration policies provide powerful capabilities for customizing app behavior. By following these best practices:

✅ Use configuration designer when possible
✅ Test configuration thoroughly
✅ Document settings and purposes
✅ Avoid policy conflicts
✅ Monitor policy status regularly

You can preconfigure apps with organization-specific settings, improving user experience and reducing configuration overhead.

Remember: App configuration policies work best when apps support configuration. Always verify app support and test configurations with pilot groups before broad deployment.