Configuring Microsoft Intune integration
Intune integration allows FortiClient iOS endpoints to connect to EMS. FortiClient iOS 6.2.2 and later versions support integration with Intune.
To configure Microsoft Intune integration:
- Add FortiClient iOS to Microsoft Intune.
-
Add the default instance for iOS using App Config. Supported App Config keys include the following:
Key
Description
mac_address
iOS device's MAC address.
udid
iOS device's UDID.
group_tag
This value is used as a group tag for configuration in EMS. For example, you can use the string "field_engineer" as a group tag, which is used when FortiClient iOS initially connects to EMS. See Group assignment rules.
cloud_invite_code
This value is used for connecting FortiClient iOS to FortiClient Cloud. Enter the invite code received from FortiClient Cloud.
user_name
FortiClient iOS username.
ems_server
EMS IP address or hostname.
ems_port
Port number for FortiClient iOS to connect Telemetry to EMS. By default, this is 8013.
ems_key
FortiClient Telemetry connection key. The EMS administrator may require FortiClient iOS to provide this key during connection.
- To enable Web Filter:
- Log in to Microsoft Endpoint Manager admin center.
- Go to Devices - Configuration profiles.
- Click Create profile.
- Configure the profile:
- From the Platform dropdown list, select iOS/iPadOS.
- From the Profile type dropdown list, select Custom.
- From the Custom configuration profile name dropdown list, select the desired profile.
- In the Configuration profile file field, select the Web Filter Mobileconfig profile that you created in Creating a Mobileconfig profile. Click OK.
- Click Create.
- Go to Assignments, then select the desired groups/users/devices to enable Web Filter for.
- After enrolling the iOS device to the Intune portal, ensure that the device receives the Web Filter Mobileconfig profile:
- On the device, go to Settings > General > Device Management.
- In the management profile, go to Restrictions.
- Verify that the Plug-In Bundle ID field contains the following URI: com.fortinet.forticlient.fabricagent.