Apps@Work (iOS)

Apps@Work is an enterprise app storefront that facilitates the secure distribution of software and apps. Apps@Work is available for iOS devices. Apps@Work corporate AppStore is integrated into Ivanti Mobile@Work for iOS clients.

Before you begin 

  • You need to enable Mutual authentication, a requirement for integrated Apps@Work to work.

  • Create a new App Catalog configuration and applied labels to it.

Administrators can configure app prerequisites and the device user will have visibility of app dependencies when installing an app from the Integrated App Catalog. VPP apps cannot be dependent apps or main apps. For more information, see App management action workflows

The iOS Apps@Work native AppStore can be deployed with the Ivanti Mobile@Work client. By default, the device user notification push frequency is set to Weekly. Once the administrator has enabled Mutual authentication and applied device labels to the (new) App Catalog configuration, the Apps@Work tab displays on the Ivanti Mobile@Work task bar. The device user can go to this tab to view and install their company-approved apps. For more information, see iOS Apps@Work AppStore Features.

If you want to change the settings see Notifying users of new iOS and macOS apps or app updates.

Existing Customers with iOS Apps@Work Webclip

Customers who have the legacy iOS Apps@Work webclip deployed will not get the Integrated App Catalog by default. If you would like to transition to the iOS Apps@Work integrated App Catalog and remove the Apps@Work webclip from the devices, perform the following steps:

Pushing the configurations

The administrator must push the App Catalog for Native Client configuration to the devices to make Apps@Work available in a Native AppStore experience from the Ivanti Mobile@Work application. For more information, see "Managing Device Settings with Configurations" in the Ivanti EPMM Device Management Guide for iOS and macOS devices.

Before you begin 

Make sure that Mutual Authentication is enabled.


  1. Log in to the Ivanti EPMM Admin Portal.
  2. Go to Policies & Configs > Configurations.
  3. Select App Catalog Service. The App Catalog Service configuration panel opens.
  4. Distribute the App Catalog Service configuration to devices via label.
  5. After the configuration is distributed, the device user must upgrade the Ivanti Mobile@Work client version to 12.11.80 or above. The Apps@Work tab is now visible in Ivanti Mobile@Work.

    The configuration cannot be pushed for devices that are registered using iReg because Ivanti Mobile@Work is unavailable on the device. You must install the Ivanti Mobile@Work client to get the native App Catalog. For more information, see "Registering Devices" in the Ivanti EPMM Device Management Guide.

Remove iOS Apps@Work Webclip

For customers who have Apps@Work Webclip distributed to their devices and have already migrated to Apps@Work Native experience they can remove iOS Apps@Work webclip.


  1. Go to Policies & Configs > Configurations.
  2. Filter to the Configuration – Apple App Catalog.
  3. Click Edit.
  4. From Distribution select Distribution to No Devices.
  5. Click Save.