Access Defence 365 on your unmanaged/personal macOS device

On this page

• Introduction
• Set Up Passwordless Sign-in
• What to know before enrolling
• Device Requirements
• Enroll in Intune through Company Portal

Introduction

This guide provides step-by-step instructions for accessing Defence 365 applications, such as Teams, SharePoint and Outlook on your unmanaged/personal macOS device. To protect sensitive information, certain security measures are mandatory.

Important Note: If you choose not to enroll in these security features, you can continue to access Defence 365 via your DWAN managed device or SSC mobile device.

Set Up Passwordless sign-in

Before accessing Defence 365 on your unmanaged/personal macOS device, you must first set up passwordless sign-in on a mobile device.

You can use either your unmanaged/personal mobile device or an SSC/DND managed mobile device for this setup.

• unmanaged/personal Mobile Device: Follow the full user guide for your device type below to install and configure both Intune Company Portal and Microsoft Authenticator with passwordless sign-in.
  • Full iOS User Guide
  • Full Android User Guide
• SSC/DND managed Mobile Device: Follow the specific sections of the user guide for your device type below to configure Microsoft Authenticator with passwordless sign-in.
  • iOS:
    • Set up Microsoft Authenticator app
    • Enable passwordless sign-in
    • Use passwordless sign-in
  • Android:
    • Set up Microsoft Authenticator app
    • Enable passwordless sign-in
    • Use passwordless sign-in

Once passwordless sign-in is configured, return to this guide to complete the macOS setup.

What to know before enrolling

• User Agreement: Before you begin, you must agree to the conditions in the Defence 365 user agreement for unmanaged/personal devices (Accessible only on the National Defence network).
• Unenrollment: You can unenroll your device from Intune at any point using Microsoft's instructions (You are now leaving the Government of Canada website).
• Password Change Required: During enrollment, you will be prompted to change your Mac device password. Ensure you know your current password, as you can be locked out if you cannot provide it.
• Fingerprint sign-in: Enrollment may temporarily disable fingerprint sign-in. You'll need to re-enable it after the process is complete.
• Visual Variations: These enrollment steps are for macOS devices. The screenshots shown on your device may look slightly different from the ones in this document depending on the version of the device you’re using.

Device Requirements

Before you begin, make sure your macOS device meets the following requirements:

• Device Type: unmanaged/personal devices only, no DWAN managed devices or SSC mobile devices.
• macOS Version: macOS 11.7.8 or higher is required. To check your macOS version, select the Apple logo in the top left of your screen, then select About This Mac. The version number will be displayed.
• Password Length: A minimum password length of 8 characters is required to install Intune. Your Mac will prompt you automatically during set-up to verify your password meets this minimum length. Follow the on-screen instructions to update your password if necessary.
• System Integrity Protection (SIP): SIP must be enabled. This is enabled by default and is not recommended to be disabled by Apple. To check if SIP is enabled, open the Terminal app (found in Applications > Utilities) and type “csrutil status”. This will confirm the status of SIP. If disabled, it is strongly recommended to enable it through the Recovery Partition.
• Firewall: The Firewall must be turned on. The Firewall settings can be found in the System Preferences app, under the Security & Privacy section, in the Firewall tab. Ensure the Firewall is turned On. Click the lock icon in the bottom left to make changes if necessary.
• Administrator: Must be logged into your device as an administrator.
• Internet Access: A stable Wi-Fi or ethernet connection is required.
• Device Limit: You can enroll up to 5 devices in D365. To check your current devices, visit the MyInfo Portal (Accessible only on the National Defence network) on DWAN, then on the Devices tile, select “Remove registered devices” to view and remove any devices as necessary.

Enroll in Intune through Company

1. Using your unmanaged/personal Mac device, open the Microsoft guide on installing Company portal (You are now leaving the Government of Canada website).
2. Download the installer by clicking the link in Step 1 of the instructions. Note: You cannot install Intune Company Portal from your Mac’s app store.

3. Once the Installer package has been downloaded, double click on it to open.
4. Select “Continue” through the introduction section.
5. Read through the Microsoft Application license terms and select “Continue” to accept the license terms and then select “Agree” to install.
6. Select “Install”.
7. Once installation is complete, select “Close”.
8. Select “Move to Trash” to delete the installer. You may also choose to keep it.
9. Once the Intune Company Portal app has been installed, open the app and select “Sign in”. Sign in using your Defence 365 (ECN) email address (firstname.lastname@ECN.forces.gc.ca).
10. If you have successfully enabled Passwordless authentication, you will be prompted to “Send notification” to your Authenticator app. Enter the number shown on your Mac screen into your Microsoft Authenticator app on your mobile device.
11. If you are still prompted to enter a password, please select “Use an app instead” option.
12. Once successfully signed in, select “Begin” to start the registration process.
13. Review the privacy information and then select “Continue” to register your Mac.
14. Select “Download Profile”. This should open the Profile section of your Mac’s System Setting application, if this does not happen you can open it manually by clicking on the apple menu in the top left corner of your Mac screen and selecting System Preferences or System Settings depending on your version of macOS.

15. In the window that pops up, select “Install”.

16. Select “Install”.
17. You will likely be asked to confirm the installation by entering your Mac password.
18. Go back to the Company Portal app to continue the enrollment.
19. The Company Portal app will check if the device meets DND/CAF compliance and security policies.
20. Select “Done” to complete enrollment.
21. To confirm your enrollment, open the Company Portal app, select the Devices menu item, and verify that the status for your mac OS device indicates "In compliance."

Back to top