Skip to content

Getting started

Getting started with Mobile Device Management

What Mobile Device Management is for, who uses it, what you need before you start, and your first steps.

Applies to Mobile Device Management as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.

Last reviewed 2 min readReport a problem
On this page
  1. What it is for
  2. Who uses it
  3. Before you start
  4. Steps to get started
  5. Where to go next

Moraph resells, configures and runs Microsoft Intune so advisors can use firm email, Teams and documents on their personal phones inside protected apps. Intune keeps business data in those apps, stops it being copied to personal ones, and removes it with a selective wipe when an advisor leaves or loses a phone, without touching personal photos or messages. Moraph runs the service day to day, and your security and compliance teams approve the policies and see the evidence.

What it is for

Advisors want to answer clients from their own phones, and firms cannot realistically hand every advisor a second device. Without controls, client information ends up in personal email, personal cloud storage and photo galleries, and when an advisor leaves the firm there is no reliable way to get it back. Full device management on a personal phone is intrusive and advisors resist it. Meanwhile examiners ask how customer information is protected on mobile devices and how the firm knows its policies are actually applied.

  • Client information leaks into personal apps and cloud storage on advisors' phones
  • Departing advisors may keep business data the firm cannot remove
  • Advisors resist full management of devices they own and pay for
  • Mobile policies and their enforcement are hard to evidence for examiners

Who uses it

  • Broker-dealers, RIAs and banks whose advisors use personal phones for work
  • Chief information security officers and IT leaders responsible for mobile access
  • Chief compliance officers who answer for customer information safeguards and supervision
  • IT teams who want Intune run well without adding headcount
  • Internal audit and examiners reviewing mobile access controls

Before you start

  • Your organization uses Mobile Device Management as a managed platform from Moraph, under an agreement that covers it.
  • Licences for Microsoft Intune, bought through Moraph or under your own agreement with the vendor.
  • A Moraph account in your organization for each person who works with Moraph on the service.
  • Named technical and security contacts, recorded in the Moraph Portal.

Steps to get started

  1. Agree the scope of the managed service for Mobile Device Management with Moraph, including which environments and teams it covers.

  2. Name your administrators, technical contact and security contact in the Moraph Portal under People and access.

  3. Review the configuration baseline Moraph proposes for your regulations, and record any changes you need.

  4. Confirm how users will sign in, through your identity provider where the platform supports it.

  5. Agree the pilot group and the cut-over plan with your Moraph delivery lead.

Where to go next

Was this page helpful?

Report a problem with this page
What’s the problem?
Quote the step or heading if you can. Don’t include passwords or personal records.
Only if you’d like a reply. We use it for this report and nothing else.

Need help with your own setup rather than this page? Raise a support ticket.