Intune/Entra iOS Shared Device shows as umanaged in Entra despite being enrolled

Hi everyone,

We currently have the following Issue:

We are using iOS/iPad-OS Shared Devices within our Company so multiple Developers can have access to them and Test Apps etc. However when trying to access M365 Apps or similar it always leads to the message:

Sign-In to Work or School Account in Device Settings under VPN and Device Management.

However, this is already the Case. The Device has already been enrolled into Intune and ABM and is also showing as compliant. The Management Profile also shows in the Device Settings.

These Profiles have worked in the past without any Issues and nothing has changed with our Configuration. It seems that the Conditional Access Policy keeps failing however with 2 Errors that should not be there as MFA is working and the Device is Compliant and enrolled in Intune.

This Issue is consistent with any Device that uses the shared Profiles, not exclusive to one Device.

Heres a copy of the Sign-In Request in Question:

Date

9/15/2025, 2:35:22 PM

Authentication requirement

Multifactor authentication

Agent Type

Not Agentic

Status

Failure

Continuous access evaluation

No

Sign-in error code

530003

Failure reason

Your device is required to be managed to access this resource.

Additional Details

The requested resource can only be accessed using a compliant device. The user is either using a device not managed by a Mobile-Device-Management (MDM) agent like Intune, or it's using an application that doesn't support device authentication. The user could enroll their devices with an approved MDM provider, or use a different app to sign in, or find the app vendor and ask them to update their app. More details available at https://support.microsoft.com/account-billing/troubleshooting-compliance-error-messages-for-a-work-or-school-account-479a9c42-d9d1-4e44-9e90-24bbad96c251

Troubleshoot Event

Follow these steps:

Launch the Sign-in Diagnostic.

Review the diagnosis and act on suggested fixes.

User

User type

Member

Cross tenant access type

None

Application

Microsoft Teams

Resource

Microsoft Teams Services

Home tenant name

Client app

Mobile Apps and Desktop clients

Client credential type

None

Original transfer method

None

Token Protection - Sign In Session

Unbound (statusCode: 1002)

Mozilla/5.0 (iPad; CPU OS 18_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) PKeyAuth/1.0

Device ID

Browser

Mobile Safari

Operating System

Ios 18.3.1

Compliant

No

Managed

No

Join Type

Grant Controls

Not satisfied

Require multifactor authentication

Require compliant device