Prisma Browser Mobile Compliance Checks
Focus
Focus
Prisma Browser

Prisma Browser Mobile Compliance Checks

Table of Contents

Prisma Browser Mobile Compliance Checks

Prisma Browser Mobile Compliance Checks
This document explains how to configure compliance checking for Prisma Browser Mobile across iOS and Android devices. By enabling this capability, administrators can rely on Microsoft Intune to validate device posture rather than trusting the app directly.

Compatibility

  • The compliance checks are supported for both Prisma Browser Mobile and Prisma Browser Mobile for Intune.
  • Android does not require any additional configuration steps beyond what is mentioned here.
  • iOS requires specific application configuration in the Microsoft Intune app before enforcement.

Step 1: Configure Conditional Access Policy in Entra ID

To require device compliance before granting access, follow these steps in Microsoft Entra ID:
  1. Navigate to Entra ID > Conditional Access > Policies.
  2. Click Create to set up a new policy.
  3. Under Grant controls, select Require device to be marked as compliant.

Step 2: Configure App Settings for iOS in Intune

For iOS devices, complete the following setup in Microsoft Intune:
  1. Navigate to Intune > Apps > App configuration policies > Add > Managed devices.
  2. Set the platform to iOS/iPadOS.
  3. Select PB Mobile as the targeted application (ensure the app was previously added to your Intune app catalog).
  4. Under Settings, choose Use configuration designer and add the following entry:
    • Configuration key: DEVICE_COMPLIANCE_LOGIN
    • Value type: Boolean
    • Configuration value: true
    Make sure that the target app is Prisma Browser Mobile for iOS. It should be added to the apps list before this step.
Save and assign the configuration policy to the target user or device group.