Deploy the GlobalProtect Mobile App Using Microsoft Intune

You can deploy the GlobalProtect app to managed endpoints that are enrolled with Microsoft Intune or to users whose endpoints are not enrolled with Microsoft Intune (iOS only). After you deploy the app, configure and deploy a VPN profile to managed endpoints to set up the GlobalProtect app for end users automatically.
  1. Enroll endpoints with Microsoft Intune.
    To deploy the GlobalProtect app to your endpoints, ensure that the endpoints are enrolled with Microsoft Intune.
  2. Add the GlobalProtect app to Microsoft Intune.
    Before you can assign the GlobalProtect app to any users or endpoints, you must add the app to Microsoft Intune.
  3. Set the app assignment type for the GlobalProtect app.
    You can determine who has access to the GlobalProtect app by assigning the app to users or endpoints. Before you can assign the app, you must set the assignment type for the app. The assignment type makes the app available, required, or uninstalls the app.
  4. Assign the GlobalProtect app to specific users or endpoints.
    After you set the assignment type for the GlobalProtect app, you can assign the app to specific users or endpoints.
    (iOS only) You can assign the GlobalProtect app to users whose endpoints are not enrolled with Microsoft Intune.

Related Documentation