Before you begin:

Make sure that your organization has an Intune management account with administrator privileges. An administrator needs the Intune management role.

Complete these steps to distribute the ETP mobile client to iOS and Android devices with Microsoft Intune.

To distribute the mobile client with Microsoft Intune:

1. Add the mobile client to Microsoft Intune from the app store.
   1. Add the mobile client for Android devices to Microsoft Intune
   2. Add the mobile client for iOS and iPadOS devices to Microsoft Intune
2. Create a configuration profile for each device OS:
   1. Create a configuration profile for Android.
   2. Create a configuration profile for iOS/iPadOS.
3. Configure custom app configuration values:
   1. Configure custom app configuration values for Android
   2. Configure custom app configuration values for iOS/iPadOS.
4. Enroll devices:
   1. Enroll Android devices. See Microsoft Intune documentation.
   2. Enroll iOS and iPadOS devices. See Microsoft Intune documentation.

Add the mobile client for Android devices to Microsoft Intune

Complete this procedure to add the ETP mobile client from the Google Play store to Microsoft Intune. After you add the app to Intune and assign it to users as detailed in this procedure, it is automatically deployed to your enrolled devices.

To add the mobile client for Android devices to Microsoft Intune:

1. Log in to Microsoft Endpoint Manager admin center.

2. In the navigation menu, click Apps.

3. In the Apps overview menu, select Android as the platform.

4. Click +Add.

5. In the Select app type window that appears, do one of the following:

   • To access the app through the public Google Play store, select Android store app.
   • To access a Google Play store that is private and specific to your organization, select Manage Google Play app.

6. Click Select.

7. If you selected to add an Android store app:

   1. Navigate to the Google Play store and search for the ​ETP Client​ app. Take note of the app details.
   2. In the App information page, add the app details for the ETP Client app. Make sure you provide the URL for the app in the Appstore URL field.
   3. Click Next.
   4. Click Next until you reach the Assignments page. If you want to add groups, see Add groups to organize users and devices.
   5. Click Next. Review the details on the Review + Create page.
   6. Click Create.

8. If you selected to add a Managed Google Play app:

   1. If you haven’t done so already, connect your Managed Google Play developer account to Intune. For instructions, see Connect your Intune account to your Managed Google Play Account.
   2. Search for ETP Client in the Google Play Store and click the app.
   3. On the page that displays, click Approve.
   4. Click Approve to access the permissions.
   5. Select Keep approved when app requests new permissions in the Approval Settings tab.
   6. Click Done.

9. If you created a Managed Google Play app, perform these additional steps to synchronize your app with the Google Play store:

   1. In the navigation menu, select Tenant administration > Connectors and tokens > Managed Google Play.
   2. Navigate to the bottom of the page and click Save + Sync. It may take a few minutes to sync. Refresh the page and check if the Last sync time updated.

Next steps

Create a configuration profile for Android.

Add the mobile client for iOS and iPadOS devices to Microsoft Intune

Complete this procedure to add the mobile client for iOS and iPadOS devices to Microsoft Intune. After you add the app to Intune and assign it to users as detailed in this procedure, it's automatically deployed to enrolled devices.

To add the mobile client for iOS and iPadOS device to Microsoft Intune:

1. Log in to Microsoft Intune admin center.

2. In the navigation menu, click Apps.

3. In the Apps overview menu, select iOS/iPadOS as the platform.

4. Click +Add.

5. Select the app from either the iOS store or from an iOS app package (.ipa) file that you have.

6. If you want to select an app from the iOS App store:

   1. In the App type menu, select iOS store app, and click Select.
   2. Click Search the App Store and search for the ​ETP Client​ app.
   3. Add or change any app information and then click Next.
   4. In the Required section, add users and groups. Click Next.
   5. Review the app information and click Create to add the app to Intune.

7. If you are uploading an iOS app package (.ipa) file:

   1. In the App type menu, select Line-of-business app.
   2. Search for the .ipa file and select it.
   3. Add or change any of the app information and click Next.
   4. In the Assignments area, add users and groups, and click Next.
      For more information on associating the app to users, groups, and devices, see Microsoft Intune documentation.
   5. In the Review + create area, review the information and click Create.

Next steps

Create a configuration profile for iOS/iPadOS

Create a configuration profile for Android

Complete this procedure to create a configuration profile for the Android version of the client. For more information on configuring a profile, see the MIcrosoft Intune documentation.

📘

Unlike the profile for iOS/iPadOS, you cannot create a custom VPN profile where you configure it to be an Always-On VPN. You can automate the installation and activation of the client. However, users will need to open the client and grant permission for it to act as a VPN. The user will only need to do this the first time they access the client.

To create a configuration profile for Android:

1. In the Microsoft Intune admin center, select Devices > Configuration profiles.
2. Click Create profile.
3. In the Platform menu, select your Android platform. Depending on what applies for your organization, you can select:
   • Android device administrators
   • Android Enterprise > Fully Managed, Dedicate, and Corporate-Owned Work Profile
   • Android Enterprise > Personally-owned work profile
4. In the Profile Type, select VPN.
5. Click Create.
6. In the Basic setting, enter a name and description for the profile, and click Next.
7. Depending on the platform you selected, you need to configure specific settings. For more information, see Android device administrator or Android Enterprise.
8. Click Next and then click Next until you reach Assignments.
9. Select the user or groups that you want to receive the profile, and click Next.
10. Review the settings and click Create.

Next Steps:

Configure custom app configuration values for Android.

Create a configuration profile for iOS/iPadOS

This procedure requires that you create a custom VPN profile where you set the client as an always-on VPN.

To configure an app configuration policy:

1. In the Microsoft Intune admin center, select Devices.
2. In the platform area of the menu, select iOS/iPadOS.
3. Click Configuration profiles.
4. Click Create profile.
5. In the Create a profile window, select VPN as the profile type.
6. Enter a name for the profile, and click Next.
7. In the Connection type menu, select Custom VPN.
8. Under Base VPN, enter the following information:
   1. For the Connection Name, enter ETP Client Connector VPN.
   2. For the VPN server address, enter mobolize.com.
   3. For the VPN Identifier, enter com.akamai.etp.client.mobo.
   4. For the Authentication method, select Username and password.
9. Enter these key and value pairs. Select string as the value type.

📘

The configuration keys are case sensitive.

10. In the VPN section:
    1. In the Type of automatic VPN menu, select On-demand VPN.
    2. For On-demand rules, click Add.
11. In the settings for the On-demand rule, do the following:
    1. In the I want to do the following menu, select Connect VPN.
    2. In the I want to restrict to menu, select All domains.
    3. Click Save.
12. For the Block user from disabling automatic VPN setting, select Yes.
13. Click Next.
14. For assignments, click Add all users and Add all devices.
15. Click Next and then click Create. You can see the configuration profile by navigating to Devices > Configuration Profiles.

Next Steps:

Configure custom app configuration values for iOS/iPadOS

Configure custom app configuration values for Android

Complete this procedure to configure custom app configuration values for the ETP Client app on Android.

To create a configuration profile:

1. In the navigation menu, click Apps and then click App configuration policies.

2. Click Add and in the menu, select Managed devices.

3. Configure Basic settings:

   1. Enter a name and description for the policy.
   2. In the Platform app, select Android Enterprise.
   3. In the Profile Type menu, select All Profile Types.
   4. In the Targeted app, click Select app and from the app, select the app that you created in Add the mobile client for Android devices to Microsoft Intune.
   5. Click Next.

4. Configure policy settings:

   1. In the Configuration settings format, select Use configuration designer.

   2. Enter these keys and values. Select string as the value type.

      Configuration Key	Value Type	Value
      entitlementCode	string	Enter the entitlement code or the activation URL.
      owner	string	{{userprincipalname}}
      deviceName	string	{{serialnumber}}

   3. Click Next.

5. In the Assignments area, select the users or groups that you want to include or exclude from this policy.

6. Click Next.

7. Review the app configuration policy and click Create.The configuration now applies to the ETP mobile client. Make you refresh the configuration on the device before you manage the mobile client app.

Next Steps:

Enroll devices. After new devices are enrolled, the app is deployed on them. You may need to refresh the configuration on the device before it’s applied.

Configure custom app configuration values for iOS/iPadOS

Complete this procedure to configure custom app configuration values for the ETP Client app on iOS or iPadOS.

To configure custom app configuration values:

1. In the navigation menu, select Apps and then under policy, select App configuration policies.
2. Click Add and in the menu, select Managed devices.

📘

The Manage apps option is not supported for the mobile client.

3. Configure basic settings for the policy:

   1. Enter a name and description for the policy.
   2. Select iOS/iPadOS as the platform.
   3. For Targeted app, click Select app and in the list that appears, select the app that you created in Add the mobile client for iOS and iPadOS devices to Microsoft Intune and click OK.
   4. Click Next.

4. Configure policy settings:

   1. In the Configuration settings format, select Use configuration designer.

   2. Enter these key and value pairs. Select string as the value type.

      Configuration Key	Value Type	Value
      entitlementCode	string	Enter the entitlement code or the activation URL
      owner	string	{{userprincipalname}}
      deviceName	string	{{serialnumber}}

   3. Click Next.

5. In the Assignments area, select the users or groups that you want to include or exclude from this policy.

6. Click Next.

7. Review the configuration and then click Create. The configuration now applies to the ETP mobile client. Make sure you refresh the configuration on the device before you manage the mobile client app.

Next Steps:

Enroll devices. After new devices are enrolled, the app is deployed on them. You may need to refresh the configuration on the device before it’s applied.