Comprehensive Guide for Creating and Distributing an Android App in Microsoft Intune

Step-by-step process for integrating your Android app into Intune and making it available via the Company Portal

enterprise mobile devices company portal

Quick Highlights

App Addition: Detailed steps on adding store apps, custom APKs, or system apps into Intune.
Configuration & Assignment: Practical guidance on configuring details and assigning the app to user groups using the “Available for enrolled devices” option.
User Experience: Explains how users access and install the app from the Company Portal after deployment.

Introduction

Deploying an Android app into Microsoft Intune and making it accessible through the Company Portal enables organizations to manage app distribution efficiently. By integrating apps into a centralized management solution like Intune, IT administrators can exercise control over app configurations, user group assignments, and installation methods. This detailed guide is designed to walk you through the process of adding an Android app—whether it’s from the Google Play Store or a custom in-house APK—and configuring it so that users can opt to install it directly from the Company Portal.

Detailed Steps and Considerations

1. Logging In and Starting the App Addition Process

Accessing the Microsoft Intune Admin Center

The first step in this process is to access the Microsoft Intune Admin Center. Sign in with your administrative credentials. Once you have entered the dashboard, navigate through the menus to get to the section where you can manage apps.

Typically, you will begin by clicking on Apps and then All Apps. From here, hit the Add button to start the new app addition flow.

2. Selecting the Appropriate App Type

Microsoft Intune supports a range of app types for deployment. You need to select the right type based on whether your app is a store app, a custom line-of-business (LOB) app, or even a system app for Android Enterprise.

Choosing Between Store App, Managed Google Play App, or LOB App

Under the "Select app type" pane, you have multiple options:

Store Apps: Use this option if deploying an app already available in the Google Play Store. Selecting “Android store app” allows you to search for the app directly by name.
Managed Google Play Apps: For apps available via Managed Google Play, this option integrates with the Google Play Store. The app will be synchronized to Intune through Managed Google Play.
Line-of-Business (LOB) Apps: For custom applications packaged as APK files, choose “Line-of-business app.” This is common for in-house developed applications tailored for corporate needs.
Web Apps: If the solution involves a URL-based app experience, you can add a web app that appears like a native app in the portal.

Making the correct selection ensures that subsequent configuration steps accurately capture the necessary app details.

3. Configuring App Details

Once you select the app type, the creation process will require additional app information. This step involves entering the application’s metadata to ensure it displays correctly in the Company Portal.

For Android Store or Managed Google Play Apps

If deploying an app from the Google Play Store:

Search for the App: Use the search functionality to locate the desired application by name. After selecting the app, key details such as its title, description, and publisher information are imported.
Customizing Display Name: You may modify the display name so that it is unique or better aligned with your organizational terminology in the Company Portal.
Description and Metadata: Provide any additional information which assists users in deciding if the app suits their needs. This may include usage details, version information, or unique functionalities that set your app apart.

For Line-of-Business (LOB) Apps

When deploying a custom APK:

Upload the APK: Browse and select the .apk file from your local system. Intune will scan the file and extract app details such as version and package name.
Enter App Information: Manually input the app name, a detailed description, and publisher information if not auto-filled by Intune. This information is essential for how the app will appear to your end users.
Optional Scope Tags: In some configurations, you can assign scope tags to control intersection with departmental or role-based restrictions. These tags support granular management capabilities.

4. Assigning the App to Users or Groups

The next critical step is to configure assignments. This determines who will see the app in the Company Portal and whether it installs automatically as a required app or is simply available for on-demand installation.

Assignment Types

There are multiple assignment options available:

Available for Enrolled Devices: This option makes it possible for users to view the app within the Company Portal and decide to install it whenever they choose. It must be used in conjunction with user groups, as available assignments work with designated groups rather than blanket device assignments.
Required: This option forces the app to install automatically on user devices based on the criteria defined in your assignment groups. This is ideal for apps that are critical for corporate security or productivity.
Uninstall: This configuration is used when the objective is to remove the app from devices as part of a phase-out strategy. It is less common during initial deployment phases.

For making the app available in the Company Portal, you must select the “Available for enrolled devices” assignment type, ensuring that the app is visible in the portal for user-initiated installation.

User Groups and Scope Management

Assign the app to specific user groups to control visibility. Instead of deploying site-wide, you might target particular departments or roles. This ensures that the right employees receive the application, and you maintain oversight on app distribution.

5. Finalizing and Publishing the App

After configuring app settings and assignments, it’s crucial to complete the process by reviewing and publishing the application.

Review and Create

Double-check all provided app settings, including the details you entered, the assignment groups selected, and any scope tags or configuration parameters. Once all details are confirmed correct, click the Create button to initiate the addition process.

Once published, the app automatically synchronizes with your device management policies, ensuring that it appears on the Company Portal as configured.

Verification in the Company Portal

It is advisable to verify the deployment by accessing the Company Portal on an enrolled device. Check to ensure that the app appears in the list under available apps. Users should be able to click on the app and start the installation process on-demand.

6. Special Considerations for Advanced Deployments

Depending on your organizational requirements, there are several advanced deployment scenarios that you might consider.

Deploying Android Enterprise System Apps

Certain Android Enterprise system apps may need special handling. These apps typically require you to enter additional details such as package names after selecting “Android Enterprise System App.” Follow the same assignment strategy – setting them as "Available for enrolled devices" so that end users can initiate the installation via the Company Portal.

Managed Google Play Integration

When dealing with Managed Google Play apps, the Intune integration streamlines the process by synchronizing app details directly from the Play Store. After searching for and selecting the desired app, forward all subsequent configuration by ensuring the app is assigned properly and that the required user groups are tied to it.

Handling Custom Line-of-Business Apps

Custom enterprise apps, developed in-house and packaged as APK files, require careful deployment planning. Ensure that these apps are thoroughly tested prior to deployment and that all necessary metadata is correctly entered in Intune.

Deployment Summary Table

The following table highlights a step-by-step overview of the entire process for ease of reference:

Step	Description	Key Considerations
Sign In	Log into the Microsoft Intune Admin Center with your credentials.	Secure admin access is essential.
Select App Type	Choose between Store app, Managed Google Play app, or Line-of-Business app.	Selection depends on app source and type.
Configure App Details	Enter app metadata, upload APK if necessary, and customize display settings.	Ensure accuracy and consistency for user clarity.
Assign the App	Link the app to user groups with "Available for enrolled devices" assignment.	Focus on targeted deployment and user group management.
Review & Publish	Conduct a comprehensive review of configurations and create the app deployment.	Validation of settings to ensure smooth deployment.
User Verification	Check that the app appears in the Company Portal for selected users.	Test on several devices to ensure accessibility.

Additional Best Practices and Troubleshooting Tips

While the process might seem straightforward, there are several best practices and troubleshooting tips that can enhance your deployment experience:

Ensure Complete Device Enrollment

For any app to appear in the Company Portal, it is imperative that devices are fully enrolled in Microsoft Intune. Incomplete or partial enrollments could lead to discrepancies between what appears on the management dashboard and what users see on their devices.

Consider Network and Access Policies

Evaluate network access and security policies to ensure that users can download apps from the Company Portal. This includes firewall settings and VPN configurations that might interfere with app downloads. Regularly reviewing these policies can prevent access issues and ensure smooth updates.

Documentation and Communication

Maintain detailed documentation of your app deployment process. Inform your user base about the newly available app and provide instructions on how to locate and install it through the Company Portal. A well-informed user base is less likely to experience installation issues, leading to better overall adoption.

Troubleshooting Common Issues

In some cases, users might report the app not appearing in the Company Portal. Troubleshoot by:

Verifying that the correct user groups have been assigned.
Double-checking that device enrollment is complete.
Reviewing the app configuration settings for any inconsistencies in metadata or scope tags.

Making use of the audit logs available in the Intune Admin Center can help diagnose issues related to app synchronization or assignment errors.

Conclusion

Integrating an Android app into Microsoft Intune and distributing it through the Company Portal is a robust way to manage enterprise mobile application deployment. By following a systematic process—starting from logging into the admin center, selecting the appropriate app type, configuring detailed metadata, and assigning the app to the correct user groups—you can offer a seamless installation experience. Embracing advanced deployment options, such as Managed Google Play integration or tailored handling of custom Line-of-Business apps, provides further flexibility to meet organizational needs. Testing the final deployment on multiple devices and routinely reviewing and updating configuration settings are key to maintaining a high level of service and user satisfaction. This comprehensive approach not only simplifies distribution but also reinforces security and administrative control over your corporate applications.