Intune

Intune accepts one shell script per policy, and it has no script parameters. Generate a standalone installer for your platform with your SafeDep Cloud credentials embedded, then upload that file. You need a SafeDep Cloud API key and Tenant ID from app.safedep.io/settings/api-keys. Installs sync to Package Guard.

​

Install

1. Clone pmg and generate the installer from scripts/mdm/:
   • macOS
   • Linux

   SAFEDEP_API_KEY=... SAFEDEP_TENANT_ID=... \
     ./generate_standalone_macos.sh \
     --embed-cloud-credentials \
     --output-dir /path/to/pmg-intune
   

   SAFEDEP_API_KEY=... SAFEDEP_TENANT_ID=... \
     ./generate_standalone_linux.sh \
     --embed-cloud-credentials \
     --output-dir /path/to/pmg-intune
   
   You can optionally add --config /path/to/config.yml to package a machine-wide config. Set cloud.enabled: true in that file.

2. Upload the generated installer through Intune, using the procedure for your platform:
   • macOS
   • Linux

   Follow Microsoft’s procedure for macOS shell scripts. Upload pmg_setup_install_macos_standalone.sh. Set Run script as signed-in user to No.

   In the Intune admin center:

   • Go to Devices > Manage devices > Scripts and remediations > Platform scripts.
   • Select the Linux tab and add pmg_setup_install_linux_standalone.sh.
   • Set the execution context to Root.

   See Microsoft’s procedure for Linux shell scripts.
3. Assign the policy to a device group. Use a recurring install frequency if new users can be added later. Each run configures the target users and runs pmg cloud sync for each one. A direct standalone upload in Intune cannot pass --cloud-sync-only to the script. Run the normal installer again when you need to sync or configure later users.

The generated script stays under Intune’s 1 MB size limit.

​

Uninstall

Upload the matching uninstaller from the same output directory (pmg_uninstall_macos_standalone.sh or pmg_uninstall_linux_standalone.sh), with the same platform settings as install. Do not assign the install and uninstall policies at the same time.