Skip to main content

Install Qoria Filter for Android on Shared Device Mode (SDM) devices using Intune

Updated

Qoria Filter for Android provides real-time filtering that seamlessly integrates with Smoothwall Cloud Filter, ensuring your policies are consistently applied.

If your school doesn’t share devices, follow these steps to install Qoria Filter for Android on single-user devices.

Before you begin

Step 1: Create an enrolment policy

  1. Sign in to the Microsoft Intune Admin Center.
  2. Go to Devices > Android > Device onboarding > Enrolment.
  3. Select Corporate-owned dedicated devices.
  4. Select Create policy to create a profile with the Token type set to Corporate-owned dedicated device with Microsoft Entra shared mode.

(Optional) Step 2: Create Groups

You can use any Intune Groups for app configuration and deployment. Dynamic Groups automatically add devices to the Group upon enrolment, removing the need to add devices manually.

Add Dynamic Groups, with the Property set to the name of the enrolment policy created in Step 1.

Step 3: Set the device mode

  1. Go to Devices > Android devices > Configuration.
  2. Select Create to create a new profile.
    1. For Platform, select Android Enterprise.
    2. For Profile type, select Templates > Device restrictions.
  3. In Configuration settings > Device experience:
    1. For Device experience type, select Kiosk mode (dedicated and fully managed).
    2. For Kiosk mode, select Multi-app.
    3. (optional) To add the Android Filter app to the device’s home screen:
      1. Select Add.
      2. Search for and select Qoria Filter.
      3. Select to add the app to the home screen.
  4. In the Dedicated devices section, change the MHS sign-in screen toggle from Not configured to Enabled.
  5. In the Assignments step, select Add groups and select the Group set up in Step 2.
  6. Review the settings before selecting Create.

Step 4: Add Qoria Filter for Android to a Dynamic Group

  1. Go to Apps > Android Apps.
  2. Assign these apps to the Group you set up in Step 2:
    • Managed Home Screen: Allows the Android Filter app to run.
    • Microsoft Authenticator: Allows the Android Filter app to query the Entra user and retrieve credentials for authentication.
    • Qoria Filter: Filters the traffic from the installed browser.
    • Any web browser program that your school uses.

Step 5: Create the application registration

  1. Sign in to the Microsoft Entra Admin Center.
  2. Create an application registration with Qoria Filter as the Name.
  3. Copy the Application (client) ID from the Overview page.
  4. Add a redirect URI:
    1. For Configure platforms, select Android.
    2. For Package name, enter com.qoria.uc.android.edu
    3. For Signature hash, enter DerKHNf9otWK42NDRZp3lshQ5sQ=

Step 6: Create a Root Certificate

You must fill in every field to generate the certificate.

  1. In Smoothwall Cloud Filter, go to Admin Panel > Self-Service Certificates.
  2. Select a Country from the dropdown.
  3. Enter your information for each of these fields:
    • State/Province (for example, UK).
    • Locality (for example, Leeds).
    • Organisation (your organisation’s name).
    • Common Name (your organisation’s domain name).
  4. (Optional) If you need to change the Key size, select a Key size.
  5. Select how many days the certificate remains valid (we recommend rotating certificates every two years).
  6. Select Generate. The Root Certificate automatically downloads to your device.
  7. The SigningCertificate and SigningCertificateKey will appear; copy both values for the next step.

Step 7: Upload the Trusted Certificate

  1. Go to Devices > Android devices > Configuration.
  2. Select Create > New Policy. 
  3. For Platform, select Android Enterprise 
  4. For Profile type, select Trusted certificate.
  5. In the Basics step, add a name, such as Android Filter Certificate, then select Next .
  6. In the Configuration settings step, upload the Root Certificate created in Step 6, then select Next .
  7. In the Assignments step, select Add groups, then select the checkbox for the User Group.
  8. Review the settings before selecting Create.

Step 8: Create the App Configuration Policy

  1. Go to Apps > App configuration policies.
  2. Select Add > Managed Devices.
  3. Add a name, such as Filter Configuration Policy.
  4. For Platform, select Android Enterprise.
  5. For Profile Type, select Fully Managed, Dedicated and Corporate-Owned Work Profile Only.
  6. For Targeted app, select Qoria Filter.
  7. Select Next.
  8. In the Configuration Settings, select the Configuration settings format dropdown and select Use configuration designer. The configuration designer panel will show on the right side.
  9. In the configuration designer panel, select the checkbox next to these Configuration keys, then select string and enter the value for each:
    1. Serial Id - enter the serial number.
    2. Hardware Id:
      • Select string as the value type. Enter an identifier to be used in reporting, such as your device’s serial number.
      • Choose variable as the value type and select ‘Intune Device ID’ from the dropdown menu.
    3. Microsoft Entra Application (client) Id - enter the Application (client) ID from Step 5.
    4. Signing Certificate – enter the SigningCertificate you copied in the previous step.
    5. Signing Certificate Private Key – enter the SigningCertificateKey you copied in the previous step.
    6. If you have a Multi-tenant configuration, select the Tenant ID checkbox and enter the UUID in Smoothwall > Tenant Management as the value.
  10. Select Next.
  11. Select Add groups, then select the checkbox for the User Group.
  12. Select Review + Create, then select Create to add the profile to Intune.

Step 9. Deploy Qoria Filter for Android

  1. Go to Apps > Android.
  2. Select Add.
  3. Under App Type, select Managed Google Play App from the dropdown.
  4. Search for and select Qoria Filter. Tip: If you can’t see the app, search for com.qoria.uc.android.edu instead.
  5. Select Sync in the App pane to sync with the Managed Google Play service.
  6. Go to Apps > Android, select the Qoria Android Filter app from the list.
  7. Go to Properties > Edit.
  8. Select Add group, select the User Group’s checkbox, then choose Select.
  9. Review the settings before selecting Create.

Step 10: Upload the Trusted Certificate

  1. Go to Devices > Android devices > Configuration.
  2. Select Create > New Policy. 
  3. For Platform, select Android Enterprise 
  4. For Profile type, select Trusted certificate.
  5. In the Basics step, add a name, such as Android Filter Certificate, then select Next .
  6. In the Configuration settings step, upload the Root Certificate created in Step 6, then select Next .
  7. In the Assignments step, select Add groups, then select the checkbox for the User Group.
  8. Review the settings before selecting Create.

Step 11: Create an Always-on VPN Policy

  1. Go to Devices > Android devices > Configuration.
  2. Select Create > New Policy.
  3. For Platform, select Android Enterprise.
  4. For Profile type, select Device Restrictions.
  5. In the Basics step, add a name, such as Android Always On VPN Filter.
  6. In the Configuration settings step, select the Connectivity dropdown.
    1. For Always-on VPN (work profile-level), select Enable.
    2. For VPN Client, select Custom.
    3. For Package ID, enter com.qoria.uc.android.edu
    4. For Lockdown Mode, select Enable.
  7. In the Assignments step, select Add groups, then select the checkbox for the User Group.
  8. Review the settings before selecting Create.

Next steps

Check the installation works as expected:

  1. Check that your Web Filter policies apply correctly.
  2. Open the app and confirm it shows This device is being protected.
  3. Use the Diagnostics page to check the last Secret Knock and the user’s Directory Groups or Group Mappings.