Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 23:56 UTC Customize Public modeDiscuss ChangeIntel on Discord

GSA Android client deployment

This page's changes and edits · All guidance changes

Microsoft's edit ·

Aug 13 minor changes

Microsoft's commit message in MicrosoftDocs/entra-docs · commit bb679cf · +7 −7 lines · also on GitHub

⋯ 2 unchanged lines
33 description: The Global Secure Access client secures network traffic at the end-user device. This article describes how to download and install the Android client app.
44 ms.service: global-secure-access
55 ms.topic: how-to
6 −ms.date: 08/12/2025
6 +ms.date: 08/13/2025
77 ms.author: jayrusso
88 author: HULKsmashGithub
99 manager: dougeby
⋯ 11 unchanged lines
2121
2222 - The product requires licensing. For details, see the licensing section of [What is Global Secure Access](overview-what-is-global-secure-access.md). If needed, you can [purchase licenses or get trial licenses](https://aka.ms/azureadlicense).
2323 - You must enable at least one Global Secure Access [traffic forwarding profile](concept-traffic-forwarding.md).
24 −- Device installation permissions on the device are required for installation.
25 −- Android devices must be running Android 10.0 or later.
26 −- Android devices must be Microsoft Entra registered devices.
27 − - Devices not managed by your organization must have the Microsoft Authenticator app must be installed.
28 − - Devices not managed through Intune must have the Company Portal app installed.
24 +- You need device installation permissions to install the client.
25 +- Android devices need to run Android 10.0 or later.
26 +- Android devices need to be Microsoft Entra registered devices.
27 + - Devices not managed by your organization need to have the Microsoft Authenticator app installed.
28 + - Devices not managed through Intune need to have the Company Portal app installed.
2929 - Device enrollment is required for Intune device compliance policies to be enforced.
3030
3131 ### Known limitations
⋯ 2 unchanged lines
3434
3535 ## Supported scenarios
3636
37 −Global Secure Access client for Android supports deployment for the legacy Device Administrator and Android Enterprise scenarios. The following Android Enterprise scenarios are supported:
37 +The Global Secure Access client for Android supports deployment for the following Android Enterprise scenarios:
3838
3939 - Corporate-owned, fully managed user devices.
4040 - Corporate-owned devices with a work profile.
⋯ 94 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:31 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 23:56 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current