On enrolled devices, managed apps can leverage org allowed accounts mode to require sign-in with a specific identity and disable multi-identity functionality.App Configuration Policies can be used by apps to customize app behavior and/or App Protection Policy settings.In addition to supporting the core App Protection Policy settings, apps are also capable of supporting advanced App Protection Policy and App Configuration Policy settings. Enabling app protection on devices managed with third-party Unified Endpoint Management solutions.

Enabling app protection without requiring enrollment.Applying data loss prevention policies without managing the user's device.Enforcing conditional launch behaviors to protect the work or school account data.Enforcing access requirements to access work or school account data.Configuring work or school account web links to open inside a managed browser, like Microsoft Edge.Restricting data transfer and copy-and-paste functions.Protecting work or school account data while leaving personal data untouched in apps that support multi-identity.

These apps support the core App Protection Policy settings which are defined as:

The following tables provide details of supported partner and Microsoft apps that are commonly used with Microsoft Intune.

For your client line-of-business apps, you can incorporate mobile app management using the Intune App Software Development Kit (SDK), or the App Wrapping Tool for iOS and the App Wrapping Tool for Android.

Expense app with dropbox support