Ending support for Setup Assistant (legacy) authentication method in ADE for iOS/iPadOS and macOS

🚨 The Signal: Intune is deprecating legacy Setup Assistant authentication for iOS/iPadOS and macOS ADE, automatically upgrading profiles to modern authentication. This enhances security by enforcing MFA and Conditional Access, critical for protecting mobile device enrollments.

The Impact

Intune administrators are affected, with a positive security risk reduction due to enforced modern authentication.

• Intune Admins: Review updated profiles for optimal security settings.
• Security Teams: Benefit from stronger device enrollment security.
• Users: Experience a more secure, potentially different, enrollment flow.

The Action

1. Navigate to Microsoft Intune admin center.
2. Go to Devices > iOS/iPadOS > iOS/iPadOS enrollment.
3. Go to Devices > macOS > macOS enrollment.
4. Review Automated Device Enrollment profiles for user affinity.
5. Validate that profiles are using 'Setup Assistant with modern authentication'.

Domain: Intune · Impact: medium · Workload: Intune · Essential Eight: Multi-Factor Authentication · ISM: ISM-0109, ISM-0123, ISM-0140, ISM-0974, ISM-1173, ISM-1228, ISM-1401, ISM-1504, ISM-1505, ISM-1679, ISM-1680, ISM-1681, ISM-1682, ISM-1683, ISM-1815, ISM-1819, ISM-1872, ISM-1873, ISM-1874, ISM-1892, ISM-1893, ISM-1894, ISM-1906, ISM-1907