Deploy Client On Android Using Intune

Deploy Client On Android Using Intune

This documents illustrates the procedure to deploy Netskope Client in Android devices using Intune.

Bind Android for Enterprise with Intune

Before you begin, ensure that you have configured Android for Enterprise binding for Microsoft Intune. This is done from the MS Endpoint Manager (

  1. Log in to Endpoint Manager admin center, go to Devices > Android and select Android Enrollment.
  2. Click Managed Google Play.

    Select the I agree checkbox and click the Launch Google to Connect now button. In the Google Play pop-up window, complete the business registration steps.

  3. After registration is complete, go to MS Endpoint Manager admin center, click Devices > Android > Android Enrollment > Managed Google Play to verify the registration process. If successful, the Status label will display Setup with a green tick.
  4. In the Android Enrollment page, select the Enrollment Profile to get the token that you can share with users for enrollment.
Approve Netskope Client
  1. Log in to your Google Play Store account and search for Netskope Client.
  2. Click Approve send authorization to MS Endpoint Manager.
Setting up Apps in MS Endpoint Manager
  1. In the MS Endpoint Manager admin center, go to Tenant Administration > Connectors and Token page.
  2. Select Managed Google Play and click Sync to get all approved apps listed in Intune Apps > All Apps.
Deploy Netskope Client

Netskope Client can be deployed to users or user groups as optional or mandatory deployment action.

  1. In the MS Endpoint Manager admin console, go to Apps > All Apps and select Netskope Client.
  2. Click Properties and then click Assignments.
  3. Select the user groups or users to which the app is to be deployed in the Required section (options +Add group, +Add all users, +Add all devices) and click Review+Save, and then click Save.
  4. Select the appropriate deployment action and click Save.
Create App Configuration and Deploy
  1. In the MS Endpoint Manager admin center, go to Apps > App Configuration Policy and click + Addand select Managed Devices.
  2. In the Basics section of the Create app configuration policy page, enter the following details and click Next.
    • Name: Give a name to the policy
    • Platform: Android Enterprise
    • Associated App: Select Netskope Client
  3. In the Settings section of the Create app configuration policy page, locate Configuration Settings and select the Use configuration designer option from the Configuration settings format dropdown list .
    1. Click Add and select the following mandatory values and click OK.
      • User Email Address: {{mail}}
      • Host: <addon-hostname>
      • Token: <Organization Key>


    • ns_mdm_check is an optional value that is used for Android device classification purpose. If you are not doing device classification for Android,you can safely ignore this field.
  4. In the Assignments section of the Create app configuration policy page, select groups from the Assign to dropdown menu to which the policy is applied. Assuming the option selected was Selected Groups, select include the Azure AD groups that this policy will apply to and click Next.


    You can also select groups that can be excluded from this configuration policy.

  5. In the Review + create section of the Create app configuration policy page, review the configuration and click Create.
  6. Enroll the Android devices to the Intune Company Portal application available on Google Play.
Share this Doc
In this topic ...