3rd Party Keyboards for iOS
Implementation Effort: Low
User Impact: Medium
Overview
On iOS and iPadOS, Intune app protection can restrict third-party keyboard use in supported managed apps so that work data entry stays within more trusted input paths. This is a useful Zero Trust control where the organization wants to reduce the risk of data capture by keyboard extensions.
Because some users rely on third-party keyboards for accessibility, multilingual input, or productivity, the organization should treat this as a policy decision that requires communication, testing, and an exception process.
Implementation Guidance
- In the Microsoft Intune admin center, edit the applicable iOS/iPadOS app protection policy and review the keyboard and input controls documented for APP on that platform.
- Enable the setting that restricts third-party keyboards in supported managed apps. Confirm the exact current UI text in Microsoft Learn before publishing final workshop guidance.
- Pilot with users who depend on different input methods, especially accessibility scenarios, before broad enforcement. Document what happens in Outlook, Teams, and Microsoft 365 apps when the restriction is active.
- Coordinate with user communications so employees understand that the restriction applies when entering organizational data in managed apps, not necessarily across the whole personal device.
- Maintain an exception path for validated accessibility or language-input needs if the business determines the risk can be accepted with compensating controls.
Video Walkthrough
Reference
- iOS/iPadOS App Protection Policy Settings - Microsoft Intune — Details iOS/iPadOS app protection policy data protection, access requirements, and conditional launch settings.
- App Protection Policies Overview - Microsoft Intune — Explains Intune app protection policy capabilities, the data protection framework, access requirements, and conditional launch behaviors.
- Tutorial - Walkthrough the Microsoft Intune Admin Center - Microsoft Intune — Shows where to review app protection policy status and troubleshoot affected users in the Intune admin center.