Getting Started

Copy a setup prompt with the install steps and the full markdown guide for this plugin.

        Set up this Capacitor plugin in the project.

Use the package manager already used by the project.
Install these package(s): `@capgo/capacitor-intune`
Run the required Capacitor sync/update step after installation.
Read this markdown guide for the full setup steps: https://raw.githubusercontent.com/Cap-go/website/refs/heads/main/apps/docs/src/content/docs/docs/plugins/intune/getting-started.mdx
Use that guide for platform-specific steps, native file edits, permissions, config changes, imports, and usage setup.
If that guide references other docs pages, read them too.

Install the package
Terminal window
```
bun add @capgo/capacitor-intune
```
Sync native projects
Terminal window
```
bunx cap sync
```
Complete native Intune setup Follow the dedicated iOS setup and Android setup pages. Intune still requires host-app native configuration for brokered auth, redirect URIs, manifests, entitlements, and MSAL config.

Requirements

Capacitor 8+
Android with Intune Android SDK 12.0.3
iOS with Intune iOS SDK 21.5.1
iOS deployment target 17.0+

Ionic’s Intune docs currently call out a January 19, 2026 cutoff for apps built with Xcode 26, requiring Intune iOS SDK 21.1.0+. This plugin already uses 21.5.1.

Basic Usage

import { IntuneMAM } from '@capgo/capacitor-intune';

await IntuneMAM.addListener('appConfigChange', (result) => {
  console.log('App config changed', result.accountId);
});

await IntuneMAM.addListener('policyChange', (result) => {
  console.log('Policy changed', result.accountId);
});

const auth = await IntuneMAM.acquireToken({
  scopes: ['https://graph.microsoft.com/.default'],
  loginHint: 'alex@example.com',
});

await IntuneMAM.registerAndEnrollAccount({
  accountId: auth.accountId,
});

const appConfig = await IntuneMAM.appConfig({
  accountId: auth.accountId,
});

const policy = await IntuneMAM.getPolicy({
  accountId: auth.accountId,
});

console.log({ auth, appConfig, policy });

Common Flows

const auth = await IntuneMAM.acquireToken({
  scopes: ['https://graph.microsoft.com/.default'],
});

await IntuneMAM.registerAndEnrollAccount({
  accountId: auth.accountId,
});

Silent token refresh

const token = await IntuneMAM.acquireTokenSilent({
  accountId: 'AAD_OBJECT_ID',
  scopes: ['https://graph.microsoft.com/.default'],
  forceRefresh: true,
});

Read the currently enrolled account

const user = await IntuneMAM.enrolledAccount();

Sign out or selectively wipe

await IntuneMAM.logoutOfAccount({ accountId: 'AAD_OBJECT_ID' });
await IntuneMAM.deRegisterAndUnenrollAccount({ accountId: 'AAD_OBJECT_ID' });

API Summary

acquireToken(options): Start Microsoft sign-in and return token plus account metadata.
acquireTokenSilent(options): Read a cached token for an existing account.
registerAndEnrollAccount(options): Register the MSAL account with Intune and trigger enrollment.
loginAndEnrollAccount(): Let Intune drive the login and enrollment flow.
appConfig(user): Read Intune app configuration values for the account.
getPolicy(user): Read the current Intune app protection policy for the account.
groupName(user): Read the common GroupName config helper value when present.
sdkVersion(): Inspect bundled Intune and MSAL versions.

Platform Notes

Web is not supported.
iOS and Android both require native project configuration beyond cap sync.
Your Azure registration, Intune policy assignment, redirect URIs, and entitlements remain app-specific.