Packaging Enpass for macOS via Microsoft Intune

This guide covers deploying Enpass Password Manager to macOS endpoints using Microsoft Intune via a PKG installer.

Step 1: Prepare the Installer

Download the latest Enpass macOS installer (.pkg) from enpass.io/downloads.

Step 2: Add the App in Intune

1. Open the Microsoft Intune admin center.

2. Navigate to Apps → macOS and select Add.

3. In the Select app type window, select macOS app (PKG) from the App type dropdown.

4. Click Select.

Step 3: App Information

1. On the App information screen, select Select app package file.

2. Use the file explorer to select your Enpass.pkg installer and click OK.

3. Note the app name and version displayed, then click Next.

Step 4: Program (Optional Scripts)

On the Program screen, specify pre-install or post-install scripts if required by your environment. Click Next.

Step 5: Requirements

Click Next.

Step 6: Detection Rules

Confirm the following values on the Detection rules screen:

Click Next.

Step 7: Assignments

Add the appropriate groups or users, then click Next.

Step 8: Review + Create

Review your settings and click Create.

Configuring App Policy

To apply policy-enforced and policy-email configuration, deploy the custom configuration profile (.mobileconfig) via a separate Intune configuration policy.

Step 1: Prepare the Configuration Profile

1. Download the base configuration file from here.

2. Open the file in a text editor and replace the placeholder values:

   • Set policy-enforced to true.

   • Set policy-email to the dynamic variable for the user's email address in your UEM solution.

3. Save the file.

Step 2: Create the Configuration Policy in Intune

1. In the Intune Portal, navigate to Devices → macOS and select Configuration.

2. Click Create → New Policy.

3. The Platform is pre-selected as macOS.

4. Select Templates as the Profile type.

5. Select Custom as the Template name, then click Create.

6. On the Basics screen, enter a name and click Next.

7. On the Configuration settings screen:

   • Enter a Custom configuration profile name.

   • Select a Deployment channel.

   • Upload your edited .mobileconfig file as the Configuration profile file.

8. Click Next.

9. On the Assignments screen, add your groups and click Next.

10. On the Review + create screen, click Create.