MDM for Office 365 includes:

Conditional access:

• Set up security policies to ensure that Office 365 corporate email and documents can be accessed only on phones and tablets that are managed by your company and that are compliant with your IT policies.

Device management:

• Set and manage security policies, like device level pin lock and jailbreak detection, to help prevent unauthorized users from accessing corporate email and data on a device when it is lost or stolen.

Selectively wipe:

• Remove Office 365 company data from an employee’s device while leaving their personal data in place.

Microsoft Intune includes all of the MDM for Office 365 capabilities, plus the following:

Advanced mobile device management:

• Provision and manage certificates, Wi-Fi, VPN (device and app-specific), and email profiles automatically for devices that enroll, enabling users to access corporate resources with the appropriate security configurations.
• Enroll and manage collections of corporate-owned devices, simplifying policy and app deployment.

Mobile application management:

• Deploy your internal line-of-business apps and apps in public app stores to users.
• Enable your workforce to securely access corporate information using the Office mobile apps they know and love, while preventing leakage of company data by restricting actions like copy, cut, paste, and save as, to only those apps managed by Intune.
• Extend protection for company data to existing line-of-business apps by using the Intune App Wrapping Tool.
• Enable secure viewing of content using the Intune Managed Browser, PDF Viewer, AV Player, and Image Viewer apps.

PC management:

• Manage devices from the cloud with no infrastructure required using Intune, or connect Intune to System Center 2012 Configuration Manager to manage all of your devices including PCs, Macs, Linux and UNIX servers, and mobile devices from a single management console.