Agent settings: Mobile iOS Configuration

Tools > Configuration > Agent Settings > Mobility > Mobile iOS configuration

Use the configuration profile editor to create new configuration profiles or edit existing ones without external tools. For more information about the configuration profile editor, see Configuration Profile Editor.

The iOS section of the configuration profile editor contains the following settings for iOS devices:


General: Set mandatory settings for all configuration profiles.

Certificates: Add certificates that will be installed with the profile on the target devices. Clicking the Configure button will let you choose an X.509 certificate file from disk to attach to the profile.


Passcode: Specify passcode policies, such as minimum password length and complexity.

Restrictions: Set functionality, application, and content restrictions.

Application Restrictions: Enable or disable specific applications.

Assessment Restrictions: Specify assessment restrictions for supervised devices, including predictive keyboard, spell check, and dictation.

Disable App Store: Disable App Store access from the device. If you want to re-enable App Store access, do so by removing the profile from the device. If you create a profile with the Disable App Store payload, you must not add any other payloads to the profile.

Wi-Fi: Configure how devices connect to your wireless network, including authentication information.

VPN: Configure how devices connect to your network via VPN, including authentication information.

Per-app VPN: Specify which URL domains will trigger a VPN connection and configure the connection settings.

Mail: Define settings for connecting to your POP or IMAP email accounts.

Exchange ActiveSync: Define settings for connecting to your Exchange server via Exchange ActiveSync.

Google Account: Configure a Google account that the user will be prompted to login to.

TV Remote: Create a list of Apple TVs that can be controlled using the Remote app.

Global HTTP Proxy: Configure settings for the global HTTP proxy for supervised devices.

Content Filter: Allow or deny URLs, and create plugin and content filters for devices.

Domains: Define unmarked email, managed domains, and password auto-fill domains.

Single Sign-On: Configure an account for single sign-on and limit single sign-on to specific URLs or apps.

LDAP: Define settings for connecting to LDAP servers.

Calendar: Define settings for connecting to CalDAV servers.

Subscribed Calendars: Configure calendar subscriptions for devices.

Contacts: Define settings for connecting to CardDAV servers.

Web Clips: Configure the label, URL, and icon for web clips.

DNS Proxy: Specify the app bundle ID and provider bundle ID, and configuration values for DNS proxies.

Fonts: Specify which fonts will be installed on the device.

Single App Mode: Configure supervised devices to run a single application.

AirPlay: Allows AirPlay destinations and enter credentials for them.

AirPrint: Configure connections to AirPrint printers.

SCEP: Define settings for connecting to your SCEP server.

macOS Server Accounts: Configure macOS server accounts and document services.

Network Usage Rules: Specify how managed apps use cellular data networks.

APN: Configure settings for a carrier Access Point Name (APN).

Cellular: Configure cellular network settings, including authentication types and passwords.

Notifications: Configure notification settings on an app by app basis.

Lock Screen Message: Enter the text displayed in the login window and lock screen.

Single Sign On Extensions: Identify and configure application extensions that can perform single sign on for the device.