Microsoft’s Intune supports Defender for Endpoint onboarding on Android as app-driven, with a device counted as onboarded once the user opens the Defender app and completes setup.
Intune can now open Defender automatically during out of box setup on corporate owned fully managed (COBO) and corporate owned work profile (COPE) devices.
If the user doesn’t finish configuration, the Intune setup step stays available so they can open Defender again.
Note that personally owned work profile devices aren’t supported.
