Mobile enrollment in Intune runs through the Company Portal app, whether the phone is company-owned or the employee's own device.

Steps (iPhone/iPad)

1. Download Intune Company Portal from the App Store.
2. Open it and sign in with your work account.
3. Tap Begin, then follow the prompts to install the management profile — you'll be sent to the iOS Settings app to confirm and install it.
4. Return to Company Portal and complete the setup steps until the device shows as registered.

Steps (Android)

1. Download Intune Company Portal from the Google Play Store.
2. Sign in with your work account.
3. Follow the prompts, which will vary slightly depending on whether your organization uses full device management or a Work Profile (a separate, walled-off area for company apps and data on a personal phone).
4. Complete any required security setup, such as a device PIN.

Common Questions

What's the difference between full management and a Work Profile?

Full management (common on company-owned Android devices) gives IT control over the whole device. A Work Profile (common for BYOD) creates a separate, encrypted container just for work apps and data — IT can manage and wipe that container without touching personal apps, photos, or messages.

Will enrolling my personal phone let my company see my personal data?

With a Work Profile or app protection policy (the typical BYOD setup), no — management is scoped to the work container or specific managed apps, not your personal data. Full device management (typically only used on company-owned phones) does have broader visibility, so it's worth asking your IT team which model your organization uses.