Intune CSP and settings

ℹ️ Support
, ,
1

I hope this is a simple question, but I’ve been banging my head on this because I cannot find the documentation.

What are the options for Intune CSP settings for Nextcloud for Android, iOS, macOS and Windows?

Currently running Nextcloud behind Entra Global Secure Access and Nextcloud authentication through Entra. I’m trying to figure out seamless SSO. So, users won’t have to enter the Nextcloud url manually. For Windows and macOS it should autostart and autoconfigure. On managed Android and iOS we want Nextcloud to simply connect without asking any questions. Especially for Windows autoconfiguration is a requirement due to some users having sessions on ephemeral disks.

Also, can we MAM protect Nextcloud on iOS and Android? Is there any guidance for Nextcloud and Intune MAM? Can Nextcloud work with an Entra CA policy to require app protection policies?

Hope someone knows since Entra and Intune are somewhat the standard in the industry.

2

Hello @RudolphReindeer,
welcome to the Nextcloud community :handshake:

You’ve posted a request in the support section. Unfortunately you have not completed the required support template. Please edit your post and add as much information as possible so that community supporters have the necessary technical information to help you resolve your issue!

Please show what you tried and what failed so far add logs and screenshots.

Regards,
wwe

3

I don’t know how this is going to help, but here we go.

Nextcloud Server version: 33.0.2

Operating system and version: Various. We generally only support OS versions that have vendor support (iOS 26, Android 16, Windows 24H2+, macOS 26).

Web server and version: Various Intune versions, mostly in the regions Europe and North America. Test environment is on service release 2604 in Europe.

Reverse proxy and version: Global Secure Access / MS App Proxy

PHP version: Various/unknown

Is this the first time you’ve seen this error? Not an error, asking for documentation

When did this problem seem to first start? Always.

Installation method: Microsoft Azure

Are you using Cloudflare, mod_security, or similar? No

Steps to replicate it (hint: details matter!):

Trying to find documentation with Google.

Used Claude to generate plist XML files.

For iOS, tried the following:

<key>serverUrl</key>

<string>https://nextcloud.domain.org</string>

<key>overrideServerUrl</key>

<string>https://nextcloud.domain.org</string>

Log entries

I believe log entries are not relevant to my question. But this shows in the Device install status: Succeeded.

I hope this helps!

4

With a enterprise support arrangement from Nextcloud GmbH, yes.

Without, kind of. The code is all there, but you’re kind of on your own to figure out how to do it. It’s not supported AFAIK outside an enterprise support arrangement (which can include other branding / customizations).

For Windows / the Desktop clients, there are some documented provisioning / deployment options described in the Admin Manual Desktop: Deployment chapter.

Mobile clients don’t have any public documentation AFAIK regarding their MDM support, but I know that MDM is implemented (at least in the Android client; I don’t recall on the iOS side of things). However, while the code is there, it’s not readily enabled unless you have an enterprise arrangement with a branded/etc client - e.g.

5

In fact you still didn’t add any details about what I tried already