Support for multiple email address policies for the same device. This is becasue we have "C" level admins who manage both the calendar and address book of the executive on their own devices. Intune does not support this as it produces an error when trying to push out two profiles.

When we disable sharing of data between unmanaged APP and managed APP, we are not able to open zipped attachment as Intune does not have an APP that is able to open Zipped files. We need an Intune managed app for unzipping ZIP, RAR and 7-ZIP files.

Most Microsoft apps support multi identities. Unfortunately, MAM only possible for one identity. Trying to logon to an MAN protected app with an identity from another tenant it shows message: 'The apps on this device are already managed. Only singe managed account is allowed on a device'

Delve is a appreciated app that needs the same Protection as the rest of the Office Apps. We need MAM-support for Delve on both Ios and Android.

Delve can access sensitive business data. If you open Delve you can read that data. Please let us create MAM-profiles the same way as for the other Office apps.

Best Regards Magnus Ericsson

The Microsoft Intune team would like to understand which Android and iOS apps your business must have data protection (MAM) support for. Add a new Comment below with the with the App Name and Platform in the field. Alternatilvely, start a new idea with ‘MAM App Support’ in the title

New Android devices (Pixel 4) don't provide fingerprint unlock.
Users must then use PIN unlock.
Suggestion is to add MAM support for Face unlock on Android, to bring it to the same parity level as iOS - https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/32395231-intune-mam-support-for-ios-face-id

Due to the sensitive nature of the photos being taken on the mobile devices at our company, Office Lens needs to be added to the Intune MAM list of mobile apps so that the photos taken with Office Lens are only capable of being stored in the company's OneDrive for Business.

I have a customer of 1800 staff who currently use a competing EMM product but would like to move to Intune. Problem is they require per-app VPN functionality. Their existing Fortigate VPN solution is not in the supported VPN product list (and they don't want to change the VPN solution). Be good to see support for Fortigate.

Force users to accept custom Terms and Conditions and have a report. Just like MDM enrollment but just for MAM without enrollment.

currently MAM is working with exchange online only. when it will support exchange on-prem

In Intune/Sccm there is no such option to enroll device for user. Our users doesn't have password (we use only smartcards) and they can't enroll mobile devices. Please add ability that specefic management user can enroll devices for users. I know about device enrollment manager, but I need also deployment certificate, e-mail, VPN profiles for this user.

Starting with iOS 7. The ability to push remote configuration to apps for iOS was added. This is achieved by an MDM Server (Intune) pushing key value pairs to a MAC compatable app.

Whilst the functionality has now been added to Intune/SCCM to support this. Skype for Business as far as I am aware doesn't allow this functionality yet. Recently SFB allowed MAM support. It would be great to be able to pre-populate users Skype for business credentials driving down calls to Servicedesks by using MAC.

Presently using Intune MAM policies there are no controls to manage new email notification for Outlook mobile app. When an email is received, body of email is displayed in notifications which is a major security concern. There is a need of granular control where Intune admins can control if email notifications for outlook app can be disabled, enabled with only subject line or sender or combination of both.

Microsoft Outlook Mobile now supports the ability to push contacts to the Local phone on IOS. We need an Intune mobile application configuration feature to turn this feature on automatically.

We have 7000 users to migrate from native IOS mail to Microsoft Outlook Mobile and we want to control this setting. Each time a phone is reset or outlook mobile is reinstalled, this feature must be turned on manually within the Outlook Mobile app

Currently, App configuration policies are only applicable for user-enrolled devices.
We use Android Enterprise (Android for Work) enrollment profiles on tablets and Smartphones to assign a Kiosk profile. However, there is no way to configure app settings that would are really important to a kiosk device (e.g. Managed browser home page & allowed sites or Managed Home Screen admin unlock).

We have blocked saving files to local device via MAM policies, but we are now unable to receive the corporate RSA token files to setup the soft tokens. we are unable to open the file with the RSA app due to MAM policy. These are corporate files so we would like to enable file exclusion to allow specified file types to be able to be saved locally or opened with apps that are not in the 'Targetted Apps' list within the MAM \ IAP policy config.

Today Outlook can sync contacts to the native iOS contacts and the Android work folder contacts however this must be manually configured by the end user. Please give us the ability to automate this via an app configuration policy.

Secondly, and I think this is actually an Outlook app issue not an Intune issue but it never hurts to ask... We need to ability to sync the Outlook calendar to the native app. Of course we'd want to be able to either allow or block this and we'd want to automate the config when it's allowed.

Would like Azure authenticator app to support MAM policy so we can to enforce passcode policy on azure authenticator mobile app that the device platform cant support biometric authentication.