- Removed MDM+MAM policy transition based selective wipe. Fixed 601 wipes in LOB apps during app upgrade if the app was originally targeted with MDM+MAM policies via the SilverLight console.
- Intune app wrapping tool: Added a command line parameter
-finishLaunchingand IntuneMAMSetting settingFinishLaunchingAtStartupto instruct the SDK to call didFinishLaunchingWithOptions at the normal time during process launch. - When a second Intune licensed user tries to log into the app, we will now behave like Android and check that the user is both licensed and targeted for policy. If both conditions are met, only then will we ask them to chose which account they want to use.
New Features
- This release contains the interface changes necessary for "True MAM-CA"/ "True Mobile App Management-Conditional Access", and we have upped the major version number. If your non-Microsoft application accesses Azure Active Directory protected resources and admins deploying your app are setting Conditional Access via the Azure Portal, please reach out to msintuneappsdk@microsoft.com for more information on the changes necessary for enabling this feature. Our goal is to have all core Microsoft Office apps using the new API by the end of 2018.
- Added a new public header,
IntuneMAMDiagnosticConsole.h, which defines theIntuneMAMDiagnosticConsoleclass interface, which developers can use to display the Intune diagnostic console. This allows end users to collect and share Intune logs to help diagnose any issue they may have. This is why we have upped the version number. This API is optional for integrators. - We have worked with the OneDrive team to provide cooperative support for the Files app. Any app that accepts files should take this drop to help us complete this scenario. For apps other than OD, there are no code changes necessary for you to enable this scenario, just update the SDK with this version.
- We have changed the app config channel. Previously, app config would only return data from the MAM app config channel. Now the app config API will perform a merge of MAM and MDM targeted policies. This feature is designed to make it so that consumers of the SDK do not have to read and merge both MAM app config and NSUserDefaults data sources. There are a number of subtleties to this API, please reach out to msintuneappsdk@microsoft.com if you intend to support app config sent through the Intune console. One example is that any new M365 Only MAM app config configuration settings should have the IntuneMAMOnly prefix to avoid being filtered out.
Bug Fixes
- Intune app wrapping tool: Fixed bug where applications were not gettings launched via their protocol links in web pages displayed through SFSafariViewController.
- GDPR: Fixed case where we scrubbed a user visible string, leading to an unintelligble alert view.
- We fixed when managed documents were shared to the Share and Action extensions via UIDocumentInteractionController, we did not correctly unencrypt them. This caused sharing of managed content to break between iAnnotate and Office applications.
- We fixed a bug where app protocols displayed within a web page hosted by a SFSafariViewController would not launch the application.
- We fixed a boundary case exposed by the Azure outage that caused apps to crash.
- We fixed a bug where users were being improperly prompted that their TouchID enrollment has changed.
- We have finished loc'ing all new strings.
- We have added more nuanced error handling in the case where we see a device not WPJ'd error caused by AAD replication delays,
- We have fixed a regression in our command processing that would result in a selective wipe command being ignored,
- Our service is migrating certs to SHA2. We've added support for this by removing MIFO code that relied on this cert.