/e/OS home screen showing work apps with a briefcase badge next to personal apps
Work apps in their own profile, your personal data stays yours.

Use this guide when your organization manages its phones with Microsoft Intune and you want to use your own /e/OS phone for work. Enrollment takes about five minutes and creates a work profile: a separate space for work apps and data, marked with a briefcase badge. Your IT admin can see and manage the work profile only, not your personal apps, photos or messages.

Before you start

  • A phone running /e/OS (this guide was made on a Fairphone 4 with /e/OS 4.3.1).
  • Your work account (email and password), given by your IT admin.
  • A Wi-Fi or mobile data connection.
  • About 100 MB of free storage for the Company Portal app.

Install Intune Company Portal

  1. Open App Lounge, search for Intune Company Portal (by Microsoft Corporation) and tap Install.

    Intune Company Portal page in App Lounge with the Install button

  2. The Company Portal icon appears on your home screen. Do not open it yet.

    Company Portal icon on the /e/OS home screen

Allow work account setup

/e/OS blocks work profile setup by default. Turn it on once, before you sign in to Company Portal. This setting belongs to microG.

  1. Open Settings, tap System, then App compatibility.

    The System settings screen with App compatibility

  2. Under Google Services, tap Work profile.

    The App compatibility screen with the Work profile entry

  3. Turn on Allow work account setup.

    The Allow work account setup switch turned on

Sign in to Company Portal

  1. Open Company Portal. When it asks to send notifications, tap Allow: Intune uses them to tell you about required actions.

    Company Portal asking for the notification permission

  2. Tap SIGN IN and log in with your work email and password.

    The Company Portal sign-in screen

Create the work profile

The setup screen carries your organization’s name (Murena in these screenshots).

  1. On the Access Setup screen, tap BEGIN.

    Access Setup listing the three steps: create work profile, activate work profile, update device settings

  2. On Let's set up your work profile, tap Accept & continue.

    Let’s set up your work profile, with the Accept & continue button

  3. Read Data in your work profile is visible to your IT admin, then tap Next. The phone creates the work profile, which takes about a minute.

    Data in your work profile is visible to your IT admin

  4. Back in Company Portal, Create work profile is checked. Tap CONTINUE to activate the profile and apply the device settings.

    Access Setup with the first step checked and the Continue button

  5. When all three steps show a green check, tap DONE.

    You’re all set, with the three steps checked

  6. On Your new work setup, tap GOT IT.

    Your new work setup, explaining the briefcase badge

Check that it worked

  1. Company Portal now lists your phone under DEVICES. You can dismiss the prompt to open the badged Google Play.

    Company Portal listing the enrolled phone under Devices

  2. On the home screen, work apps carry a briefcase badge (Contacts, Files and Settings for example). Always use the badged version for work. The briefcase icon in the status bar shows the work profile is active.

    Home screen with badged work apps

Install your work apps

Your IT admin picks the apps your work profile needs. You install them from the Work app store, reached through Company Portal.

  1. In Company Portal, open the menu (top left) and tap Get Apps.

    The Company Portal menu with Get Apps

  2. The Work app store lists the apps your admin requires under Installation required. Tap the download button next to each app.

    The Work app store listing the required apps

  3. Once an app is installed, its download button turns into a trash icon.

    Microsoft Authenticator installed in the Work app store

  4. The installed apps show up on your home screen with the briefcase badge, like Authenticator here.

    Authenticator with a work badge on the home screen

Troubleshooting

ProblemFix
Work profile setup fails silently, or Get Apps shows a microG errorAllow work account setup was off during enrollment. Turn it on, remove the work profile in Settings, then enroll again.
Company Portal freezes or stops responding after a reinstallRestart the phone, then open Company Portal again.
Sign-in is refusedCheck with your IT admin that your account is allowed to enroll a personal Android device.
You want to leave IntuneRemove the work profile in Settings → Accounts. Only work apps and data are deleted, your personal data stays.