Intune ADE Enrollment: Legacy vs Modern vs Company Portal Authentication

Intune supports three different ways to handle user affinity during Apple ADE enrollment — Authentication at Company Portal, Legacy Authentication, and Modern Authentication. In this video I walk through all three side by side so you can see exactly what happens on screen at every step, instead of testing each one yourself. What you will learn in this video: How the Remote Management screen appears during first time setup, how to confirm the correct authentication profile was applied in Intune, the exact differences between the Legacy Authentication and Modern Authentication sign-in screens, why Legacy Authentication does not support MFA, how user affinity gets established differently across all three flows, the difference between device targeted and user targeted policies at enrollment, and the role the Company Portal app plays in each flow. Why this matters: These three flows might look identical on the surface during the first few enrollment screens, but they behave very differently once the device lands on the Home Screen. Understanding these differences helps you troubleshoot enrollment issues faster and make sense of why policies or user affinity might not be showing up the way you expect. This video is perfect for: IT admins managing Apple devices through Microsoft Intune, anyone setting up Apple ADE zero touch enrollment, admins troubleshooting user affinity or policy targeting issues, and anyone trying to understand the practical difference between Intune's authentication profiles for Apple devices. Check out my other videos on Apple Business Manager setup and Apple Configurator enrollment for more on the full ADE workflow. If this video helped you understand Intune ADE enrollment better, please hit Like and Subscribe for more Intune and Apple device management deep dives every week. Drop a comment below if you have any questions and I will get back to you.