How to Install Microsoft Intune Company Portal on Mac Devices

Navigate to the official Microsoft "Enroll My Mac" portal to download the latest Company Portal installer. This link automatically provides the most current universal .pkg file that supports both Apple Silicon and Intel-based Macs.

Open your web browser and go to: https://go.microsoft.com/fwlink/?linkid=2119217

This URL redirects to the latest Company Portal installer. Click the download button when prompted. The file will be named something like CompanyPortal-Installer.pkg and will be approximately 50-80 MB in size.

Double-click the downloaded .pkg file to launch the installation wizard. macOS will verify the package signature before allowing installation to proceed.

Follow these wizard steps:

1. On the Introduction screen, review the installation overview and click Continue
2. On the License screen, read the software license agreement, click Continue, then click Agree to accept the terms
3. On the Installation Type screen, select the default installation location (usually your Applications folder) and click Install

When prompted for authentication, enter your device password or use Touch ID/Face ID to authorize the installation.

After installation completes, Microsoft AutoUpdate (MAU) may automatically launch to check for the latest Company Portal updates. This is normal behavior and ensures you have the most current version.

If MAU launches:

1. Allow it to check for updates
2. If updates are found, click Install to apply them
3. Wait for the update process to complete before proceeding

You can also manually check for updates later by opening Company Portal and going to Help & Support > Check for Updates.

Open the Company Portal application from your Applications folder or Spotlight search. The app will present a welcome screen with sign-in options.

Complete the sign-in process:

1. Click Sign In on the welcome screen
2. Enter your work or school email address (e.g., user@company.com)
3. Click Next and enter your password when prompted
4. Complete any multi-factor authentication (MFA) challenges if required by your organization

After successful authentication, you'll see the Company Portal dashboard with available apps and device management options.

To fully manage your device through Intune, you need to enroll it by installing a management profile. This step registers your Mac with your organization's mobile device management (MDM) system.

In Company Portal:

1. Look for a banner or notification about device enrollment
2. Click Set up access or Enroll this device
3. On the setup screen, click Begin
4. Review the privacy information explaining what data your organization can access
5. Click Continue to proceed with enrollment

The app will explain what information your organization can see and manage on your device, including installed apps, device location (if enabled), and compliance status.

Company Portal will generate a management profile specific to your organization and account. This profile contains the certificates and policies needed for device management.

Follow these steps carefully:

1. Click Download profile when prompted
2. The profile will download to your Downloads folder automatically
3. Company Portal may automatically open System Settings, or you can open it manually
4. Navigate to System Settings > Privacy & Security > Profiles

You should see a new profile listed, typically named after your organization or containing "MDM Profile" in the title.

Before installing the management profile, verify its authenticity to ensure it's legitimate and from your organization.

In System Settings > Privacy & Security > Profiles:

1. Select the downloaded profile to view its details
2. Verify the following security indicators:
   • Status: Should show "Verified"
   • Signed by: Should be "IOSProfileSigning.manage.microsoft.com"
   • Profile type: Should indicate "Profile Service Enrollment" or "Encrypted Profile Service"
3. If all verification checks pass, click Install
4. Enter your device password when prompted
5. Click Enroll to complete the installation

Return to Company Portal to complete the enrollment process and address any device compliance requirements your organization has configured.

In Company Portal:

1. The app should automatically detect the installed profile and show a green checkmark
2. Review any compliance issues listed (e.g., required software updates, security settings)
3. For each issue, click How to resolve this to see detailed instructions
4. Follow the provided steps to address compliance requirements
5. Click Retry after making changes to re-check compliance
6. Once all requirements are met, click Done

Common compliance requirements include enabling FileVault encryption, installing security updates, or configuring specific system settings.

During the enrollment process, you may encounter keychain access prompts. These are necessary for Company Portal to securely store certificates and authentication tokens.

When keychain prompts appear:

1. Select Always Allow (not just "Allow")
2. Enter your login password (the same password you use to log into your Mac)
3. Avoid pressing Enter immediately - make sure you click the "Always Allow" button first

Perform final verification of your installation:

system_profiler SPApplicationsDataType | grep -A 5 "Company Portal"

This command will show Company Portal installation details including version and location.

You can also verify enrollment status by checking:

1. Company Portal dashboard shows your organization name
2. System Settings > Privacy & Security > Profiles shows the installed MDM profile
3. Any assigned apps appear in Company Portal for installation