---
title: Configuring Android for Work for Microsoft Intune
description: To ensure that PingID mobile app configurations can be pushed to iOS devices, install an Apple Push Notification service (APNs) certificate in Microsoft Intune.
component: pingone
page_id: pingone:strong_authentication_mfa:p1_pid_configuring_android_work_for_intune
canonical_url: https://docs.pingidentity.com/pingone/strong_authentication_mfa/p1_pid_configuring_android_work_for_intune.html
revdate: July 1, 2024
section_ids:
  before-you-begin: Before you begin
  about-this-task: About this task
  steps: Steps
  result: Result:
  result-2: Result:
  result-3: Result:
  result-4: Result:
  result-5: Result:
  result-6: Result:
  result-7: Result:
  result-8: Result:
  next-steps: Next steps
---

# Configuring Android for Work for Microsoft Intune

To ensure that PingID mobile app configurations can be pushed to iOS devices, install an Apple Push Notification service (APNs) certificate in Microsoft Intune.

## Before you begin

In the Intune dashboard, configure Android work profile devices. Learn more in [Enroll device and create Android work profile](https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-device-android-work-profile) in the Microsoft Intune documentation.

## About this task

This is an example configuration of Android for Work without G Suite. You can also configure Android for Work for MDM with G Suite.

## Steps

1. Go to the [Microsoft Azure portal](https://portal.azure.com/) and sign on.

2. Go to **Intune > Home > Client Apps > Managed Google Play**.

   ### Result:

   The **Managed Google Play** window opens.

3. Click **Open the Managed Google Play Store**.

   ![A screen capture of the Managed Google Play window, highlighting the Open the Managed Google Play Store link.](_images/kek1564020746340.png)

   ### Result:

   Google Play opens in a new browser tab or window.

4. Search for the PingID mobile app and select it.

   ![A screen capture of Google Play search results, showing the PingID app.](_images/vks1564020747191.png)

5. Click **Approve**.

   ![A screen capture of the PingID app in Google Play.](_images/fsn1564020748917.png)

   |   |                                                                   |
   | - | ----------------------------------------------------------------- |
   |   | You might need to sign on as a managed Google Play administrator. |

   ### Result:

   The **Client Apps - Apps** window opens.

6. From the **Apps** list, click the PingID Google Play entry, and then from the left-hand menu, click **Assignments**.

   ![A screen capture of the Client Apps - Apps window.](_images/azj1564020749604.png)

   ### Result:

   The **PingID - Assignments** window opens.

7. In the **PingID - Assignments** window, assign the PingID mobile app for Android to user groups.

   Learn more about creating, managing, and assigning apps to groups in the relevant Intune documentation.

   ![A screen capture of the Assignments window.](_images/gby1564020750402.png)

8. Go to **Intune > Client Apps > App Configuration Policies**, and then click **Add**.

   ### Result:

   The **Add Configuration Policy** window opens.

9. In the **Name** field, enter a name for the policy.

10. In the **Description** field, add a description.

    ![A screen capture of the Add Configuration Policy window showing the Name field, the Description field, and the Device enrollment type list.](_images/zew1564020751584.png)

11. In the **Device Enrollment Type** list, select **Managed Devices**.

    ![A screen capture of the Device Enrollment Type list with the options for Managed devices and Managed apps.](_images/wkz1564020752154.png)

    ### Result:

    The **Platform** list is displayed.

12. From the **Platform** list, choose **Android**.

    ![A screen capture of the Platform list.](_images/fbg1564020752678.png)

13. At the bottom of the window, click **Add**.

    ### Result:

    The **Associated App** tab is displayed.

14. On the **Associated App** tab, click **PingID**.

    ![A screen capture of the Associated App tab. In this screen capture, the list of available apps include Intune Company Portal and PingID.](_images/ipq1564020753239.png)

    ### Result:

    The **Configuration Settings** tab is displayed.

15. In the **Configuration Settings Format** list, select **Use Configuration Designer**.

    ![A screen capture of the Configuration Settings tab showing the Configuration Settings Format list with the options Use Configuration Designer and Enter JSON Data.](_images/xyc1564020753910.png)

16. In the **Configuration Value** field, enter the PingID MDM token, and then click **Add**.

    Learn more in [(Workforce Only) Configuring the PingID mobile application settings](p1_configuring_pid_mobile_application.html).

    ![A screen capture of the Configuration Settings tab.](_images/exw1564020754692.png)

## Next steps

Learn more in [Adding the PingID mobile app for Android in Microsoft Intune](p1_pid_adding_pid_mobile_app_android_in_intune.html).