Table of Contents
Why did Intune MAM block my iOS wrapped app or Android Company Portal access in 2026, and how do I fix it?
Intune MAM update (January 2026): confirm your app access still works
If users report that managed apps no longer open, fail sign-in, or lose access to corporate data, start with one assumption: the app that enforces Intune Mobile Application Management (MAM) policy is out of date.
Beginning January 19, 2026 (and continuing shortly after), Microsoft began rolling out service updates to strengthen the Intune MAM platform. These improvements depend on current client components. When those components lag, policy enforcement can fail, and access can degrade or stop.
What must be updated
To keep app-based access working under Intune MAM, ensure these are on the latest supported versions:
- iOS wrapped apps (apps built with the Intune App Wrapping Tool)
- iOS SDK-integrated apps (apps compiled with the Intune App SDK for iOS)
- Intune Company Portal for Android (required for many Android MAM/MAM-WE scenarios, depending on your configuration)
Microsoft communicated this requirement in 2025 in the support article: “Update to the latest Intune Company Portal for Android, Intune App SDK for iOS, and Intune App Wrapper for iOS.”
What changes for end users
When versions fall behind, users may see issues that look like “account problems,” but usually trace back to enforcement and compliance handshakes between the app and the Intune MAM service.
Common user-facing symptoms include:
- App sign-in loops or repeated prompts to authenticate
- “Access denied” or “Your organization’s data cannot be accessed”
- Apps opening but not syncing, sending, or downloading work data
- Conditional access passes in browser but fails in the app
What to do now (recommended order)
- Confirm scope: Identify which apps are wrapped or SDK-integrated on iOS, plus which Android users rely on Company Portal for managed access.
- Update endpoints: Push the latest Company Portal on Android and ensure iOS users run updated managed apps from the App Store (or updated internal builds for line-of-business apps).
- Update iOS app builds: For in-house or custom apps, rebuild with the latest Intune App SDK for iOS or re-wrap with the latest iOS wrapper, then redeploy.
- Validate policy flow: Test sign-in, policy prompts, data transfer controls (copy/paste, save-as, open-in), and app startup on a pilot group before broad rollout.
- Communicate simply: Tell users what to update, where to update it, and what success looks like (for example, “App opens and shows your work data without repeated sign-in prompts”).
Advisor note for IT owners
Treat this as a reliability task, not a one-time announcement. Put a lightweight maintenance rule in place: keep Intune-managed apps, SDKs, and wrapper outputs current, then schedule periodic review so a future service hardening update does not turn into an access outage.