メインコンテンツへスキップ

040: Approved keyboards

Implementation Effort: Medium
User Impact: Medium

Overview​

Approved keyboards in Microsoft Intune app protection policies help prevent organizational data entered into protected apps from being exposed through untrusted input methods. On supported Android app protection scenarios, this control limits protected apps to a reviewed list of keyboards and input methods.

This is a targeted Zero Trust data-protection control for organizations that need tighter assurance over how work data is entered into mobile apps.

Implementation Guidance​

  1. Confirm that the protected apps, Intune SDK/app wrapper versions, and target Android scenarios support approved keyboards.
  2. Define an approved list that balances security with language, accessibility, and support needs.
  3. In the Microsoft Intune admin center, configure the keyboard requirement in the Android app protection policy.
  4. Add or validate the package IDs for approved keyboards. Keep a controlled record of those package IDs so they can be reviewed when apps are updated.
  5. Pilot with real users who rely on alternate keyboards before enforcing the setting broadly.
  6. If multiple app protection policies apply to the same user, verify the effective behavior so the common approved-keyboard set does not unintentionally block valid input methods.
  7. Document the remediation experience users will see when they try to open a protected app with an unapproved keyboard.

Approved keyboards are best reserved for populations where the security value clearly outweighs the usability cost.

Video Walkthrough​

Reference​