• 12/09/2020
  • 7 minutes to check out

In this short article

Utilize the info in this article to help you include macOS line-of-business apps to Microsoft Intune. You need to download an external tool to pre-process your . pkg files prior to you can publish your line-of-business file to Microsoft Intune. The pre-processing of your . pkg files need to happen on a macOS device.

Keep in mind

Beginning with the release of macOS Catalina 10.15, prior to including your apps to Intune, check to make certain your macOS LOB apps are notarized. If the developers of your LOB apps did not notarize their apps, the apps will fail to work on your users’ macOS devices. To find out more about how to examine if an app is notarized, check out Notarize your macOS apps to get ready for macOS Catalina.


While users of macOS gadgets can eliminate some of the built-in macOS apps like Stocks, and Maps, you can not use Intune to redeploy those apps. If end users erase these apps, they must go to the app shop, and manually re install them.

Before your start

You should download an external tool, mark the downloaded tool as an executable, and pre-process your . pkg files with the tool before you can publish your line-of-business file to Microsoft Intune. The pre-processing of your . pkg files should happen on a macOS gadget. Utilize the Intune App Wrapping Tool for Mac to allow Mac apps to be handled by Microsoft Intune.


The . pkg file must be signed utilizing “Designer ID Installer” certificate, gotten from an Apple Designer account. Just . pkg files may be utilized to publish macOS LOB apps to Microsoft Intune. However, conversion of other formats, such as . dmg to . pkg is supported. For additional information about transforming non-pkg application types, see How to deploy DMG or APP-format apps to Intune-managed Macs.

  1. Download the Intune App Wrapping Tool for Mac.


    The Intune App Wrapping Tool for Mac must be operated on a macOS machine.

  2. Mark the downloaded tool as an executable:

    • Start the terminal app.
    • Modification the directory to the location where IntuneAppUtil is located.
    • Run the following command to make the tool executable:
      chmod +x IntuneAppUtil
  3. Use the IntuneAppUtil command within the Intune App Wrapping Tool for Mac to cover . pkg LOB app file from a . intunemac file.

    Test commands to use for the Microsoft Intune App Wrapping Tool for macOS:


    Make sure that the argument does not contain areas before running the IntuneAppUtil commands.

    • IntuneAppUtil -h
      This command will show use details for the tool.

    • IntuneAppUtil -c -o [- v] This command will wrap the . pkg LOB app file offered in to a . intunemac file of the same name and place it in the folder pointed to by .

    • IntuneAppUtil -r [- v] This command will extract the detected criteria and variation for the created . intunemac file.

Select the app type

  1. Sign in to the Microsoft Endpoint Manager admin center.
  2. Select Apps > All apps > Add.
  3. In the Select app type pane, under the Other app types, choose Line-of-business app.
  4. Click Select. The Include app actions are displayed.

Step 1 – App details

Select the app bundle file

  1. In the Include app pane, click Select app bundle file.
  2. In the App plan file pane, select the browse button. Then, choose an macOS installation file with the extension . intunemac. The app details will be shown.
  3. When you’re finished, choose OK on the App plan file pane to add the app.

Set app details

  1. In the App info page, add the details for your app. Depending upon the app that you selected, some of the values in this pane may be automatically completed.
    • Call: Enter the name of the app as it appears in the business website. Make sure all app names that you use are special. If the exact same app name exists two times, just one of the apps appears in the company portal.
    • Description: Go into the description of the app. The description appears in the company website.
    • Publisher: Enter the name of the publisher of the app.
    • Minimum Os: From the list, select the minimum operating system version on which the app can be set up. If you designate the app to a device with an earlier os, it will not be installed.
    • Ignore app version: Select Yes to install the app irrespective of whether the app is already installed on the device. Select No to just install the app when it is not currently installed on the device.
    • Set up as handled: Select Yes to install the Mac LOB app as a handled app on supported gadgets (macOS 11 and higher). A macOS LOB app can only be installed as handled when the app distributable consists of a single app without any embedded plans and installs to the / Applications directory site. Managed line-of-business apps will be able to be removed using the uninstall project type on supported devices (macOS 11 and higher). In addition, removing the MDM profile removes all handled apps from the device. The default worth is No.
    • Classification: Select one or more of the integrated app classifications, or choose a category that you developed. Categories make it easier for users to discover the app when they browse through the business portal.
    • Show this as a featured app in the Business Portal: Display the app plainly on the main page of the business website when users browse for apps.
    • Details URL: Optionally, get in the URL of a site that contains info about this app. The URL appears in the business portal.
    • Personal Privacy URL: Optionally, enter the URL of a website which contains privacy information for this app. The URL appears in the business website.
    • Developer: Optionally, get in the name of the app developer.
    • Owner: Optionally, go into a name for the owner of this app. An example is HR department.
    • Notes: Enter any notes that you wish to connect with this app.
    • Logo design: Submit an icon that is related to the app. This icon is displayed with the app when users browse through the company website.
  2. Click Beside show the Scope tags page.

You can use scope tags to identify who can see client app details in Intune. For complete information about scope tags, see Usage role-based access control and scope tags for distributed IT.

  1. Click Select scope tags to additionally include scope tags for the app.
  2. Click Next to show the Assignments page.

Step 3 – Tasks

  1. Select the Required, Available for registered devices, or Uninstall group assignments for the app. To learn more, see Include groups to organize users and devices and Assign apps to groups with Microsoft Intune.
  2. Click Next to show the Evaluation + create page.

Step 4 – Review + develop

  1. Review the values and settings you went into for the app.

  2. When you are done, click Create to add the app to Intune.

    The Overview blade for the line-of-business app is shown.

The app you have actually produced appears in the apps list where you can designate it to the groups you select. For aid, see How to designate apps to groups.

Keep in mind

If the . pkg file contains numerous apps or app installers, then Microsoft Intune will just report that the app is successfully installed when all installed apps are discovered on the gadget.

Update a line-of-business app

  1. Sign in to the Microsoft Endpoint Supervisor admin center.
  2. Select Apps > All apps.
  3. Find and choose your app from the list of apps.
  4. Select Properties under Manage from the app pane.
  5. Select Edit beside App information.
  6. Click on the listed file next to Select file to update. The App package file pane is displayed.
  7. Select the folder icon and browse to the area of your updated app file. Select Open. The app information is updated with the plan info.
  8. Validate that App variation reflects the updated app plan.

Keep in mind

For the Intune service to successfully release a brand-new . pkg file to the device you must increment the package version and CFBundleVersion string in the packageinfo file in your . pkg bundle.

Next actions