How to Set Up Your Android Device:

Content:

Device Enrollment in Company Portal
Enable Biometric Logins for Work Apps
ESim Activation on Your Android Device
MFA Setup
How to add Microsoft authenticator as a new mode of authentication

I. Device enrollment in company portal

1. Prerequisites

Before beginning the setup process, ensure the following:

Your device is running Android 9.0 or higher.
Have your corporate email ID and password ready.

2. Install Intune Company Portal

1. Go to the Google Play Store.
2. Search for "Intune Company Portal" and install the app.

3. Sign In to the Company Portal

1. Open the Intune Company Portal app.
2. Tap Sign In.

3. Enter your corporate email address and tap Next.

4. Enter your password and sign in.

5. On the Company Access Setup page, tap Begin.

2 Below is a list of items your company can and cannot see on your mobile device. When finished reviewing, tap Continue.

Your company can never see:

Your company may see:

• Call and Web history

• Model

• Location

• Serial Number

• Email and text messages

• Operating system

• Contacts

• Work apps

• Passwords

• Owner

• Calendar

• Device name

• Camera roll

• Manufacturer

• Personal apps

• Phone number for corporate devices

3. Tap Continue.

4. Tap Accept & Continue to begin work profile setup.

5. Tap Next on Company Access Setup.

6. Click Next to Activate your work profile and click Continue.

7. Select Device Category from the list.

8. Click Done and Got It on the remaining screens.

9. The Microsoft Edge app will automatically be downloaded to your device. The Edge browser will be your dedicated work browser so you can open links from emails, etc. You should sign into Edge with your work account.

10. You may now close all open applications. Enrollment is complete.

II. Enable Biometric Logins for Work Apps

1. Open Android Settings.
2. Search for "work profile".
3. In Security settings, enable Biometric / Fingerprint login under the work profile section.

10. Verify Setup

- Open the Company Portal app:
- If you see the list of available apps, your device is successfully enrolled.
- If it asks you to sign in, enrollment is incomplete.
- you still need to enroll before downloading applications.

III. ESim Activation on Android device:

1. Go to Settings > Connections > SIM Manager.
2. Tap Add eSIM.
3. Your phone should display a Verizon / AT&T eSIM ready for activation.

IV. Microsoft Authenticator Set Up:

Download the Microsoft Authenticator app from the Play Store.
Tap Add Account > Work or School Account.
Scan the QR code displayed on your laptop during MFA setup.
After you scan the QR code using the Microsoft Authenticator app on your phone, your work account will be added to the app, and a six-digit authentication code will appear.
Return to your laptop screen.
You will see a prompt asking you to enter the six-digit code displayed in the Authenticator app.
Open the app on your phone, note the code shown under your work account, and enter it on the laptop to verify and complete the authentication process.

V. How to add Microsoft authenticator as a new mode of authentication:

If you can already authenticate via text or call but also want to add Microsoft Authenticator as a mode of authentication, please follow these steps:

Open SharePoint Bullseye - Home
Click on your name/ profile present on the top right corner of the site and select "View Account".
On the next page click on Security info. It will ask you to authenticate again.
Next click on Add sign in method
Select the Microsoft Authenticator option from the list. Then click on Next.
Scan the QR code from you Microsoft Authenticator app.

Once you have scanned the QR code it will automatically add the account in your authenticator.
Then click on next and try it out. Enter the two-digit code displayed on your laptop screen, into your authenticator.
And this is how you can add Microsoft authenticator as a mode of authentication.
Note: You can setup authenticator only on two devices at a time, in case you want to setup the MS authenticator on a third device, you will have to remove one device from your sharepoint.

⚠️ Note: If you accidentally skipped the MFA QR code step during your laptop setup or encounter any issues during setting up the device, please contact the GLDD IT Service Desk.