Set up Microsoft Intune with Notion (iOS and Android)

Microsoft Intune can apply security policies to the Notion mobile app. This helps IT teams protect company data in Notion on iOS and Android devices.

Notion supports Intune app protection policies (also called MAM without device enrolment). That means Intune manages the app and its data, not the entire device.

To configure Notion with Microsoft Intune, you’ll need:

• A Notion Enterprise plan

• Admin access in Microsoft Intune

• Admin access in Microsoft Entra ID (formerly Azure AD)

• Intune licences for all members who will use Notion on mobile devices

• The Notion mobile app installed on iOS or Android

Notion supports the following app protection controls through Intune:

• Restrict cut, copy and paste

• Restrict screen capture

• Restrict sharing to other apps

• Restrict backups

• Require corporate credentials

• Require a PIN or biometrics

• Require re-authentication after a timeout

• Conditional launch checks (minimum OS version, app version, offline grace period or blocked rooted/jailbroken devices)

• Selective wipe (remove work data from Notion)

• Block multiple accounts (restrict to one workspace at a time on managed devices)

First, you’ll need to add Notion to Microsoft Endpoint Manager.

1. Sign in to the Microsoft Intune admin centre.

2. Go to Apps→ All apps→ Add.

3. Add Notionfrom the iOS store app or Android store app.

4. Assign the app to the right users or groups.

5. Click Createto add the app.

App protection policies control how corporate data is handled within Notion. You’ll need to create separate policies for iOS and Android.

1. In the Intune admin centre, go to Apps→ App protection policies.

2. Click Create policyand select iOS/iPadOSor Android.

3. Under Apps, select Notionfrom the list of managed apps. Alternatively, click Add and select Custom apps. Then, enter the bundle identifier “notion.id.”

4. Choose the protection settings you want.

5. Assign the policies to the right users or groups.

6. Review and create the policy. Then, repeat for the other platform.

An organisation owner must turn on Intune in Notion.

1. Open the admin console in Notion.

2. Find the Microsoft Intunesetting.

3. Turn it on.

Once you switch on this setting, members may see a one-time Microsoft sign-in the first time they open Notion on mobile.

After Intune is set up, users keep using the standard Notion mobile app. Depending on your policies, users may:

• Need to sign in with Microsoft

• Be blocked from copying or pasting content outside of Notion

• Be blocked from sharing content to other apps

• Be required to set up a PIN or biometrics for access

• Policies aren’t applying

  • Confirm the user is included in the Intune policy assignment

  • Confirm the user has an Intune licence

  • Wait a few minutes for policy changes to propagate, then ask the user to sign out and sign back in

  • Confirm the user is on the latest Notion mobile app

• Users can’t access Notion

  • Check conditional access settings (if your org uses them)

  • Confirm required Microsoft apps are installed if your setup requires them (like Microsoft Authenticator or Company Portal)

• Unexpected policy behaviour

  • Check whether multiple policies apply, and whether policy priority is affecting results

  • Contact Notion support with details about expected vs actual behaviour

• Which Notion plans support Intune?

  Intune support is available on the Enterprise plan only.

• Do users need a separate Notion app?

  No. Users can use the standard Notion mobile app.

• Can I use Intune with personal Notion accounts?

  Intune policies apply to work accounts managed through your organisation.

• What happens during selective wipe

  Work data on the device is removed from Notion. The Notion app stays installed.

• Microsoft Intune documentation

• App protection policies overview

• Conditional Access documentation