Adding MacOS Apps to Intune

Adding LOB Apps

Prerequisites

  1. The PKG app must be notarized. If it is not notarized, then the application cannot be deployed via Intune. You can check if the installer was notarized by running this command on MacOS: spctl -a -vvv -t install app_filepath.pkg
  2. MacOS Line of Business (LOB) apps have a maximum file size limit of 2 GB.
  3. A Mac laptop is required. Pre-processing steps must take place on a MacOS device.
  4. The .pkg file must be signed using a “Developer ID Installer” certificate obtained from an Apple Developer account.
  5. Only .pkg files may be used to upload MacOS LOB apps to Intune.
  6. You can convert a .dmg or .app file to a .pkg and then upload it. How to deploy DMG or APP-format apps to Intune-managed Macs - Microsoft Tech Community
  7. Download a copy of the Intune App Wrapping Tool for Mac
    • Mark the downloaded tool as executable: chmod +x IntuneAppUtil

Package the LOB App

  1. Run the following command to package the LOB app and prepare it to be uploaded to Intune. This command creates a .intunemac file that you will upload to Intune. IntuneAppUtil -c source_file -o output_file -v
  2. Get the version information and other parameters for the .intunemac file. IntuneAppUtil -r filename.intunemac -v

Upload the App to Intune

  1. Open the Microsoft Endpoint Manager and go to Apps > macOS > Add
  2. Select the App Type:
    • Web Link: Allows you to link to an online web application. Intune will create a shortcut to the URL on assigned device screens.
    • Line-of-business App: To add a custom or in-house app, upload the app’s installation file. Make sure the file extension matches the app’s intended platform. Mac LOB apps are packaged as .pkg or .intunemac files.
    • macOS app (DMG): To add a macOS application, upload the app’s installation file. Intune supports .dmg files containing .app files. macOS apps are deployed using the Microsoft Intune management agent for macOS
  3. Upload the packaged application and fill out the Intune forms as requested. They may differ slightly based upon the type of application you selected.
  4. There are a few items we need to always include when uploading a new app:
    • The version number
    • Whether the app can auto update itsself or not.
    • An Information URL for the application (such as a support or documentation page).
    • A privacy URL for the application.
    • The legal name of the developer.
    • The app logo on top of a transparent background in png format. (jpg doesnt support transparency).

Adding macOS app’s (DMG)

  1. Download the DMG file
  2. Gather the following information for the app:
    • A short summary or description of the app.
    • The legal name of the Developer/Publisher.
    • An information URL for the application (such as a support or documentation page).
    • A privacy URL for the application.
    • The app logo on top of a transparent background in png format. (jpg doesnt support transparency).
  3. Open the endpoint manager admin center. Go to Apps > macOS > Add.
  4. Fill in the app information section using the info you collected on step 2.