Reminder: Update to the latest Company Portal for Android, Intune App SDK for iOS, and Intune App Wrapper for iOS

Update to the latest Intune Company Portal for Android, iOS App SDK, and iOS App Wrapper to avoid app launch blocks. iOS apps must use SDK/wrapper versions 20.8.0+ (Xcode 16) or 21.1.0+ (Xcode 26). Notify users to update apps and consider enabling Conditional Launch policies.

As previously communicated in MC1158328 and documentation, we have made updates to improve the Intune mobile application management (MAM) service. This update requires iOS wrapped apps, iOS SDK integrated apps, and the Company Portal for Android to be updated to the latest versions to ensure applications stay secure and run smoothly. Important: If you do not update to the latest versions, users will be blocked from launching your app.

Note that the way Android updates, once one Microsoft application with the updated SDK is on the device and the Company Portal is updated to the latest version, Android apps will update, so this message is focused on iOS SDK/app wrapper updates. We recommend to always update your Android and iOS apps to the latest SDK or app wrapper to ensure that your app continues to run smoothly. Review the following GitHub announcements for more details on the specific impact: 

• SDK for iOS: Action Required: Update the MAM SDK in your application to avoid end user impact - microsoftconnect/ms-intune-app-sdk-ios Discussion #598 | GitHub
• Wrapper for iOS: Action Required: Wrap your application with version 20.8.1+ to avoid end user impact - microsoftconnect/intune-app-wrapping-tool-ios Discussion #143 | GitHub

If you have questions, leave a comment on the applicable GitHub announcement. Additionally, if you have not already, navigate to the applicable GitHub repository and subscribe to “Releases” and “Discussions” (Watch > Custom > select Releases, Discussions) to ensure you stay up-to-date with the latest SDK releases, updates, and other important announcements. 

[How this will affect your organization:]

If your users have not updated to the latest Microsoft or third-party app protection supported apps, they will be blocked from launching their apps. If you have iOS line-of-business (LOB) applications that are using the Intune wrapper or Intune SDK, you must be on Wrapper/SDK version 20.8.0 or later for apps compiled with Xcode 16 and version 21.1.0 or later for apps compiled with Xcode 26 to avoid your users being blocked.

[What you need to do to prepare:]

Ensure you have made the following changes as applicable:

For apps using the Intune App SDK, you must update to the new version of the Intune App SDK for iOS:

• For apps built with XCode 16 use v20.8.0 - Release 20.8.0 - microsoftconnect/ms-intune-app-sdk-ios | GitHub
• For apps built with XCode 26 use v21.1.0 - Release 21.1.0 - microsoftconnect/ms-intune-app-sdk-ios | GitHub

For apps using the wrapper, you must update to the new version of the Intune App Wrapping Tool for iOS:

• For apps built with XCode 16 use v20.8.1 - Release 20.8.1 - microsoftconnect/intune-app-wrapping-tool-ios | GitHub
• For apps built with XCode 26 use v21.1.0 - Release 21.1.0 - microsoftconnect/intune-app-wrapping-tool-ios | GitHub

For tenants with policies targeted to iOS apps:

• Notify your users that they need to upgrade to the latest version of the Microsoft apps. You can find the latest version of the apps in the App store. For example, you can find the latest version of Microsoft Teams here and Microsoft Outlook here.
• Additionally, you have the option to enable the following Conditional Launch settings:
• The Min SDK version setting to block users if the app is using Intune SDK for iOS older than 20.8.0.
• The Min app version setting to warn users on older Microsoft apps. Note, this setting must be in a policy targeted to only the targeted app.

For tenants with policies targeted to Android apps:

• Notify your users that they need to upgrade to the latest version (v5.0.6726.0) of the Intune Company Portal app.
• Additionally, you have the option to enable the following Conditional Launch device condition setting:
• The Min Company Portal version setting to warn users using a Company Portal app version older than 5.0.6726.0.