Shared iPad with MSAL

This subsection documents one deployment only: Shared iPad with MSAL.

It covers the current setup that uses:

• IDmelon Authenticator in shared mode
• Microsoft Authenticator in shared mode
• Microsoft Intune for app deployment and managed app configuration
• Microsoft Entra ID for the MSAL app registration
• Microsoft Enterprise SSO for Microsoft app sign-in reuse

Use the pages below in this order:

1. Set up Shared iPad with MSAL: the main end-to-end guide.
2. Microsoft Entra app for MSAL: the short reference for the Entra app registration.
3. Microsoft Enterprise SSO profile: the short reference for the Intune SSO profile.

All values in this subsection are sanitized. Replace API keys, client IDs, and self-service URLs with values from your own workspace before deployment.