MC1158328: Take Action: Update to the latest Company Portal for Android, Intune App SDK for iOS, and Intune App Wrapper for iOS

Starting December 15, 2025, or soon after, we are making updates to improve the Intune mobile application management (MAM) service. This update will require iOS wrapped apps, iOS SDK integrated apps, and the Company Portal for Android to be updated to the latest versions to ensure applications stay secure and run smoothly. Important: If you do not update to the latest versions, users will be blocked from launching your app.

Note that the way Android updates, once one Microsoft application with the updated SDK is on the device and the Company Portal is updated to the latest version, Android apps will update, so this message is focused on iOS SDK/app wrapper updates. We recommend to always update your Android and iOS apps to the latest SDK or app wrapper to ensure that your app continues to run smoothly. Review the following GitHub announcements for more details on the specific impact: 

• SDK for iOS: Action Required: Update the MAM SDK in your application to avoid end user impact - microsoftconnect/ms-intune-app-sdk-ios Discussion #598 | GitHub
• Wrapper for iOS: Action Required: Wrap your application with version 20.8.1+ to avoid end user impact - microsoftconnect/intune-app-wrapping-tool-ios Discussion #143 | GitHub

If you have questions, leave a comment on the applicable GitHub announcement. Additionally, if you have not already, navigate to the applicable GitHub repository and subscribe to “Releases” and “Discussions” (Watch > Custom > select Releases, Discussions) to ensure you stay up-to-date with the latest SDK releases, updates, and other important announcements. 

How this will affect your organization:

If your users have not updated to the latest Microsoft or third-party app protection supported apps, they will be blocked from launching their apps. If you have iOS line-of-business (LOB) applications that are using the Intune wrapper or Intune SDK, you must be on Wrapper/SDK version 20.8.0 or later for apps compiled with Xcode 16 and version 21.1.0 or later for apps compiled with Xcode 26 to avoid your users being blocked.

What you need to do to prepare:

Plan to make the changes below before December 15, 2025:

For apps using the Intune App SDK, you must update to the new version of the Intune App SDK for iOS:

• For apps built with XCode 16 use v20.8.0 - Release 20.8.0 - microsoftconnect/ms-intune-app-sdk-ios | GitHub
• For apps built with XCode 26 use v21.1.0 - Release 21.1.0 - microsoftconnect/ms-intune-app-sdk-ios | GitHub

For apps using the wrapper, you must update to the new version of the Intune App Wrapping Tool for iOS:

• For apps built with XCode 16 use v20.8.1 - Release 20.8.1 - microsoftconnect/intune-app-wrapping-tool-ios | GitHub
• For apps built with XCode 26 use v21.1.0 - Release 21.1.0 - microsoftconnect/intune-app-wrapping-tool-ios | GitHub

For tenants with policies targeted to iOS apps:

• Notify your users that they need to upgrade to the latest version of the Microsoft apps. You can find the latest version of the apps in the App store. For example, you can find the latest version of Microsoft Teams here and Microsoft Outlook here.
• Additionally, you have the option to enable the following Conditional Launch settings:
  • The Min SDK version setting to block users if the app is using Intune SDK for iOS older than 20.8.0.
  • The Min app version setting to warn users on older Microsoft apps. Note, this setting must be in a policy targeted to only the targeted app.

For tenants with policies targeted to Android apps:

• Notify your users that they need to upgrade to the latest version (v5.0.6726.0) of the Intune Company Portal app.
• Additionally, you have the option to enable the following Conditional Launch device condition setting:
  • The Min Company Portal version setting to warn users using a Company Portal app version older than 5.0.6726.0.