intune iOS instructions

Author: deadlypants1973

src/content/docs/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/partners/intune.mdx

@@ -48,8 +48,42 @@ Intune allows you to insert [predefined variables](https://learn.microsoft.com/e
 
 Before proceeding with per-app VPN configuration, you must make sure Autoconnect is disabled for your organization in the Cloudflare dashboard.
 
-
-
+1. Log in to Microsoft Intunes admin center for your organization.
+2. Go to **Devices** > **iOS/iPadOS Devices** > **Manage Devices** > **Configuration**. Select **+ Create** > **New Policy.**
+3. Select _Templates_ in the **Profile Type** dropdown menu, then select **VPN** as the **Template Name** and select **Create**.
+4. Give the configuration a name, and an optional description, if you desire, then select **Next**.
+5. Select _Custom VPN_ from the **Connection Type** dropdown menu.
+6. Expand the **Base VPN** section.
+	- Give the VPN connection a name.
+	- Enter "1.1.1.1" as the VPN server address (this value is not actually used).
+	- Set _Username and password_ as the **Authentication method**.
+	- Enter `com.cloudflare.cloudflareoneagent` as the VPN identifier.
+	- Enter any Key and Value into the custom VPN attributes (Cloudflare One does not use these but Intunes requires at least one entry).
+7. Expand the **Automatic VPN** section. Select _Per-app VPN_ as the **Type of automatic VPN** and _packet-tunnel_ as the **Provider Type**. Select **Next**.
+8. Add any Groups, Users, or Devices to which you want to distribute this configuration and Select **Next**.
+9. Review the settings and select **Create**.
+10. Go to **Apps** > **iOS/iPadOS Apps** and select **+ Add**.
+11. Select _iOS store app_ from the **App Type** dropdown > **Select**.
+12. Select **Search the App Store**, then search for the app whose traffic you want to go through the VPN > select the desired app > **Select**.
+13. Review the selected app settings and Select **Next**.
+14. Select **+ Add Group** to add the group of users to which to distribute this app. Then select **None** underneath VPN.
+15. Select the configuration you just created from the VPN dropdown menu and select **OK**.
+16. Select **Next**, review the settings, then select **Create**.
+17. Repeat steps 10-16 for each app you want to use the VPN.
+
+:::note
+
+To support re-authentication, you must include a third-party browser that Cloudflare One can use to re-authenticate the user. The following third-party browsers are supported:
+
+- Google Chrome
+- Firefox
+- Firefox Focus
+- Microsoft Edge
+- Brave
+- Opera
+
+Cloudflare One will continue to use a Safari window for initial authentication per-security best practices.
+:::
 
 ## Android