Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 16:48 UTC Customize Public modeDiscuss ChangeIntel on Discord

GSA Android client deployment

This page's changes and edits · All guidance changes

Microsoft's edit ·

Aug 13 updates per PM feedback.

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 14bb026 · +4 −8 lines · also on GitHub

⋯ 14 unchanged lines
1515
1616 The Global Secure Access client can be deployed to compliant Android devices using Microsoft Intune and Microsoft Defender for Endpoint on Android. The Android client is built into the Defender for Endpoint Android app, which streamlines how your end users connect to Global Secure Access. The Global Secure Access Android client makes it easier for your end users to connect to the resources they need without having to manually configure VPN settings on their devices.
1717
18 −This article explains the prerequisites and how to deploy the client onto Android devices.
18 +This article explains how to deploy the Global Secure Access client onto Android devices.
1919
2020 ## Prerequisites
2121
⋯ 20 unchanged lines
4242
4343 ### Non-Microsoft mobile device management
4444
45 −Non-Microsoft mobile device management (MDM) scenarios are also supported. In these scenarios, known as *Global Secure Access only mode*, you only need to enable a traffic forwarding profile and configure the app according to the vendor documentation.
45 +The Global Secure Access client also supports non-Microsoft mobile device management (MDM) scenarios. In these scenarios, known as *Global Secure Access only mode*, you only need to enable a traffic forwarding profile and configure the app according to the vendor documentation.
4646
4747 ## Deploy Microsoft Defender for Endpoint Android
4848
4949 You can use the Global Secure Access client for Android in different deployment modes and scenarios.
5050
51 −After you enable a traffic forwarding profile and configure your network, the Global Secure Access Android client appears in the Defender app automatically. However, the Global Secure Access client is disabled by default. Users can enable the client from the Defender app. To learn how, see [Confirm Global Secure Access appears in Defender app](#confirm-global-secure-access-appears-in-defender-app).
52 −
53 −You can enable the client using Android Enterprise enrollment mode. This mode supports corporate-owned, fully managed devices, corporate-owned devices with a work profile, and personal devices with a work profile.
54 −
5551 ### Create an MDM profile and configure Global Secure Access for Microsoft Defender for Endpoint
5652
5753 1. In the [Microsoft Intune admin center](https://intune.microsoft.com/#home), go to **Apps** > **Android** > **Manage Apps** > **Configuration**.
⋯ 63 unchanged lines
121117
122118 ## Troubleshooting
123119
124 −The Global Secure Access tile doesn't appear after onboarding the tenant to the service. Restart the Defender app.
120 +If the Global Secure Access tile doesn't appear after onboarding the tenant to the service, try restarting the Defender app.
125121
126 −When attempting to access a Private Access application, the connection might time out after a successful interactive sign-in. Reloading the application through a web browser refresh should resolve the issue.
122 +When attempting to access a Private Access application, the connection might time out after a successful interactive sign-in. Try reloading the application by refreshing the web browser.
127123
128124 ## Related content
129125 - [About Microsoft Defender for Endpoint on Android](/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint-android)
⋯ 5 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:31 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 16:48 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current