How Can We Help?

Mobile Application Management (MAM)

You are here:
< All Topics

What is Mobile Application Management (MAM)?

Mobile Application Management (MAM) protects the company’s Office 365 data regardless of whether the device is a company issued or personal (BYOD) device.

The MAM policies ensure the company’s data remains safe and contained in an approved managed app. These policies apply to the following Microsoft applications on all mobile devices that use Office 365.

  • Excel
  • Outlook
  • PowerPoint
  • Word
  • OneNote
  • OneDrive
  • Microsoft Teams
  • Microsoft SharePoint
  • Microsoft Business

MAM protects users and the company because when an employee brings a personal device into an enterprise setting, mobile application management enable the Company to control access to business data and remove the locally cached business data from the device if it is lost/stolen, or when its owner no longer works with the company.

What can the company see or don’t on your device?


  • View browsing history
  • See your personal emails, documents, contacts, or calendar
  • Access your passwords
  • View, edit, or delete your photos
  • See the location of your device


  • View model, serial number, and operating system.
  • See the Office 365 you have installed
  • View data stored in the company’s 365 apps (listed above)
  • Remotely wipe and remove data stored in the company’s 365 apps (listed above)

What does this mean for users?

Any user who accessed company 365 data from a company issued or personal mobile device will automatically have MAM enabled.

Users do not need to enroll their mobile device, the MAM policies apply to every device in the background an on the above applications.

Users must use the Microsoft approved app from the app store on their mobile device to access company 365 resources.

How to setup Outlook for emails?

All users must use Outlook on mobile devices to access their work emails, third party email applications, and the built in mail apps on iOS and Android will not work.

iOS Setup Guide:

Android Setup Guide:

What will happen on an iOS mobile device?

The mobile application management policy will require users to set a PIN on their device to access applications.

After the first setup, you will need a PIN/fingerprint/face ID to open any work app after 30 minutes of not using your phone.

What will happen on an Android mobile device?

You will be prompted to install the Company portal app to continue accessing any files and folders when opening a work account resource. You do not need to sign in to the company portal app, it just needs to be installed on the phone.

microsoft intune company portal app popup on mobile

Once you have installed the company portal app, you will be requested to create a device PIN.

After the first setup, you will need a PIN/fingerprint/face ID to open any work app after 30 minutes of not using your phone.

On some devices, you may be prompted to download the Microsoft Authenticator application. Please proceed to download this app when prompted. It is simply used to register the device.

[arrow_forms id="12763"]
Was this article helpful?
5 out Of 5 Stars

1 rating

5 Stars 100%
4 Stars 0%
3 Stars 0%
2 Stars 0%
1 Stars 0%
How can we improve this article?
Please submit the reason for your vote so that we can improve the article.
Table of Contents