New features summary

Support for Lookout SDK 4.1.17: Lookout SDK version 4.1.17 is now supported with this release.

Enhanced security for sensitive screens: The Registration and SAML Authentication screens are now protected by default against screen shots, screen recording, and screen sharing. On managed devices, administrators can selectively disable this protection for the SAML Authentication screen using the key-value pair:

SCREENSHOT_PROTECTION_DISABLED = True

Upgrade to Zimperium SDK: Starting from this release, we now integrate with the Zimperium SDK version 5.6.37.

iOS 15 deprecation: Starting with this release, Go for iOS no longer supports iOS 15.

Note for Former App Station users: Ivanti recommends transitioning to the Ivanti Go Client for iOS. Ivanti Go Client provides a comprehensive MAM solution that includes an in-app App Catalog and Web clip functionality. For more information, see MAM Only.

Enhancement for Ivanti N-MDM Azure: Ivanti N-MDM now supports Azure Device Compliance in both GCC High and DoD environments. This enhancement ensures that organizations operating in these specialized environments can continue to leverage Ivanti N-MDM for secure and compliant device management.

Change in Ivanti N-MDM user experience: The Re-enroll button has been removed from devices enrolled through Apple's Device Enrollment Program (DEP), streamlining the user interface and device management process.

Support for Migration from Zimperium V4 to V5: The migration from Zimperium V4 to V5 is now supported using Ivanti Support requests. The support team helps you migrate your existing devices from the Zimperium V4 console to V5. This method includes recreating admin users, groups, policies, and other V5 configurations for your device groups.

Reinstall button for Integrated AppCatalog: Ivanti Go for iOS has introduced a Reinstall button on the Integrated App Catalog device. This button allows you to reinstall the app immediately when necessary.

Enhancement to deep link: We introduce a new deep link feature that allows you to create custom webclips that launch the AppCatalog in Ivanti Go for iOS. This feature launches an integrated app catalogue, allowing you to open apps directly from the following link.

• DeepLink URL to show AppCatalog page: mobileirongo://deeplink/navigation?screen=app_catalog

• DeepLink URL to show open specific app details: mobileirongo://deeplink/navigation?screen=app_details&bundle_id=<bundle_id>

Support for Zimperium v5 Console: For the new customers, Ivanti Go for iOS now supports the new Zimperium v5 console.

Update to Go for iOS user interface for Zimperium Dynamic Threat detection: The Go for iOS Threat Defense user interface is redesigned to support dynamic threats detected by the server. The threat defense card displays count based on severity, while the Threats Defense page lists all types of threats, sorted based on their severity.

Dynamic threat detection enhancements: Starting with this release, you can filter low-severity threats using Zimperium threat object values. The Go for iOS now displays threat alert strings from the Threat object, and the server will remove the custom text enabled button.

Support for iOS 18: Ivanti Go for iOS now supports iOS version 18.

New Return to Service option: The Ivanti Go for iOS now includes an Enable Return to Service option which allows the device to automatically re-enroll once data is wiped, reducing the need to manually re-enroll the device after a wipe.

Support to collect Ivanti Tunnel logs: Ivanti Go for iOS now collects the Ivanti Tunnel logs from the application. Administrators can view these logs from the Ivanti Neurons for MDM.

Updated partner SDK version: Starting from this release, Ivanti Go 104 for iOS is now updated to partner SDK versions from 5.3.17 to 5.4.16.

Remove filtering for threats: Remove the filtering based on the availability of local actions to display all threats for Android and iOS.

Catalan language support: Starting from this release, Ivanti Go 104 for iOS now supports Catalan language.

Implementation of Web content filtering for iOS supervised devices with MTD configuration: Starting with this release, Ivanti Go for iOS supports web content filtering.
To enable Web content filtering:

• In zConsole, you must select Policy > Policies > Phishing & Web Content Policy > Enhanced Phishing Protection plus Web Content Filtering to block malicious or phishing URLs. You can allow and block websites based on the category that you select.

• In the Ivanti Neurons for MDM administrative portal, you can create a custom iOS configuration to add a WebContentFilter configuration from Configurations > WebContentFilter config using iOS Custom configuration in the Custom policy by uploading an xml file along with the MTD activation configuration.

Deprecate iOS 14 support: From this release, Go Client no longer support iOS 14 devices.

UI changes to threat category in Ivanti Go for iOS: Ivanti mobile threat defense introduces a change in threat categories in a user interface (UI) that dynamically adjusts based on threat severity. On the home page, the threat defense card shows the count of different threats based on severity. In addition, the threat details page that appears when the threat card is clicked has been redesigned to show all the threats on one screen, arranged accordingly to threat severity. The most serious threats are shown first, and threats of the same level are shown according to when they occurred. For more information, see the Mobile Threat Defense Solution Guide.

The new threat card and the threat details' screen now show a greater number of threats than in previous version, as MTD now displays all the applicable threats rather than only a subset, as was the case in the previous UI.

Support of Safari Web Content Extension: Starting from Ivanti Go 96 for iOS release, Zimperium no longer provides the content blocker functionality to block suspicious URLs; instead, it includes the addition of a new Safari Web extension supported with the Zimperium V5 SDK. This Safari web extension works in conjunction with MTD configuration in Ivanti applications to block suspicious URLs on web browsers. The user must enable this Safari web extension, named Ivanti MTD Extension, from the settings menu. Safari web extensions are supported starting with iOS 15 and above. For more information, see the Mobile Threat Defense Solution Guide.

VNS Enablement for Visible and Silent Notifications: Starting from Ivanti Go 96 for iOS releases, Visible Notification Scheduling is enabled when silent notifications are not sent for a specific period determined in the VNS notification settings. Silent notifications were delivered for the set amount of time prior to this release. Now, when the silent notification stops delivering the scheduled notification, the visible notification alerts the user.

New alert message for an expiry client certificate: When a client certificate has expired, the client app should be automatically retired with this alert message:

Title: Update your account

Message: Your security certificates have expired. Tap Ok to register again to secure your device and continue accessing the application.

Enhancement for accessing my devices section: Starting with the Ivanti Go 96 iOS application, IDP-enrolled users can access My Devices without credentials. This feature supports IDP providers such as AAD, OKTA, etc.

Administrators can contact Support if they are interested in enabling this on-demand feature on their tenant.

Ivanti End User License and Services Agreement is updated: Ivanti has updated the End User License and Services Agreement (EULA) on the Settings tab in the Go for iOS application. The EULA option lets you view the End User License and Services Agreement in the application browser.

Support for Lookout SDK 4.1.9: Lookout SDK version 4.1.9 is now supported with this release.

Support for Google BeyondCorp Partner Device Compliance: The Google BeyondCorp Partner Device Compliance is now supported with the current release of Ivanti Go for iOS.

Support for iOS 13 is deprecated: Starting this release, support for iOS 13 is deprecated. The devices that contain iOS 13 will not be upgraded to Go for iOS 92, neither can it be installed afresh. Ensure that you upgrade to the latest iOS to upgrade to Go for iOS 92.

Support for Banner Style field for Integrated Apps@Work: When the Featured Banner option is enabled in the App Catalog the Banner Style color options are available for the banner that displays in the Apps@Work Home page. This is applicable to iOS only.

Reducing Flips during authentication: When a device requires check-in with the server or a password change, AppConnect flips to display the iOS client app. However, when there is user inactivity, AppConnect does not flip to Go client and the passcode screen is displayed on AppConnect instead. When the device check-in times out, AppConnect flips back to display Go client. Although this feature is disabled by default for the users, you can enable this feature by setting the following values from the Apps > App Catalog > Details > App Configuration tab on the Ivanti Neurons for MDM Administrative portal.

• Key - MI_AC_ENABLE_SSO_AUTHENTICATION

• Value - True

• Type - Boolean
  

App Catalog for Native Client adds Apps@Work tab to the Go client application for MAM-only devices: The App Catalog for Native Client configuration adds the Apps@Work tab to the Go client application during device registration for MAM-only devices. The Apps@Work tab displays the list of applications from the App Catalog. This is applicable only for Ivanti Neurons for MDM Release 92 onwards.

Native App Catalog app dependencies are added: Starting from the current release, prerequisite apps install before the main app in Apps@Work and the following changes are displayed.

• The Install button displays color and is enabled only after the VPP enrollment is completed for all VPP prerequisite apps.

• The Native App Catalog UI on the app detail, shows only one Install button for the main app. When the device user clicks on Install a pop-up appears and a message is displayed.

• The main app provides feedback to the device user about the apps that are installed and the apps that are missing.

• The main app is installed once the device reports that the prerequisite app is available for installation in the next device check-in.

• When the installation is triggered for VPP apps that contain user based license, the end user license message appears. The device user must accept the license. If the prerequisites or the main app have different VPP tokens, the device user will have to accept the licenses for each prerequisite app.

• The VPP apps installation workflow will remain the same as it currently is for device based license.

• The app list view displays the Open button for all apps that have prerequisites and the end user will be lead to the App Details page before installing.

• When the device user clicks the Install All button, the main apps with prerequisite will stay in Pending state while the prerequisite apps install. Check-in happens after five minutes and the installation main app begins. If the check-in fails the main app is not installed.

• The Minimal Client Version supported is 92.

• Branded and migrated clients are also supported.

  The system attempts to install the prerequisites apps only once. If the installation of the prerequisite apps fails, the attempt to install the main app also fails.

Branding-related updates in Go for iOS: MobileIron Go for iOS is now re-branded to Ivanti Go for iOS. The following updates are made as part of the branding updates:

• Name change under the server details
• Notifications are updated
• My Devices tab is updated
• Brand logo is updated in Settings >Troubleshoot >Send MobileIron Go Logs
• Icons are updated
• References to the product name in the text are updated
• References to the product name in messages are updated
• References to the product name are updated on the Privacy screen
  

When existing users upgrade to the latest version of the app, they may encounter outdated icons/ images and names until they perform a specific activity. This issue arises from cached data on their device and typically resolves over time with regular usage of the application

Local notification prompts appear when the application is terminated: If the end user terminates the Ivanti Go application you can set the application to do one of the following:

• To display the default notification - Ensure that you stay connected with the App to keep your device secured, set the following values in the Managed App configuration on the Ivanti Neurons for MDM Administrative portal respectively.
• Key - enableAppTerminationNotification
• Value - True/False OR 1/0
  
• Type - Boolean OR String
• To Display a custom notification, add the following Key to the Managed App configuration :
• Key - appTerminationNotificationMessage
• Value - Custom notification
  
• Type - String

For more information about configuration settings, see Using Apple Managed App Configuration in App Configuration topic on the Ivanti Neurons for MDM Administrative Guide.

Technical enhancements and improvements: Ivanti does not support iOS 12 devices. As part of continuous enhancements to Ivanti Neurons for MDM communication some of the technical improvements do not support iOS 12 devices. To access the supported client functionality, please upgrade your devices to the latest operating system and then update the client applications. If you experience any issues during the client upgrade process, uninstall and reinstall the application.

Enhancements to support app certificates renewal: New enhancements are added to support the automatic renewal of app certificates to maintain client server communication for continuous enhancements.

Navigate to the privacy page from the home screen: Starting from the current release, you can navigate to the Privacy page from the home screen. A new section Your Privacy is added on the home page. Click Learn More to open the Privacy page.

Refresh the Ivanti Go for iOS home screen to check for updates from the Ivanti Neurons for MDM server: Starting from the current release, you can pull down the Ivanti Go for iOS home screen on your device to refresh and pull the latest configuration that is pushed from the Ivanti Neurons for MDM server.

Updated Device Status indication: The Last Update time and the Device Status are updated in Ivanti Go for iOS. You can view the Device Status as follows and then tap the status to view the complete information related to the status:

• Device in compliance

• Device not connected (An indicator appears)

• Device not in compliance (An indicator appears)

Extensible Single Sign-On (SSO) configuration to manage Pasteboard Permission pop-up: The Pasteboard Permission feature in iOS 15+ devices displays a notification banner or a pop-up asking the user permission before accessing the pasteboard content from another application. When an AppConnect application is launched, a pasteboard banner or pop-up appears.

The Extensible Single Sign-On configuration from the Ivanti Neurons MDM server lets you disable the banner or pop-ups from appearing on Ivanti Go for iOS or AppConnect applications. The AppConnect applications that do not support the Extensible Single Sign-On configuration will continue to use the pasteboard feature and display the banner or pop-up.

The server pushes the Extensible Single Sign-On configuration 10 seconds after the MDM profile is installed. During this interval, the SSO Extension does not work.

• If the device user performs copy or paste.
• While generating the AppConnect application logs (since the transmission of log files takes place through pasteboard).
• If an Ivanti Go for iOS or any AppConnect application does not support the Extensible Single Sign-on configuration.

For more information, see Single Sign-On Configuration from the Ivanti Neurons for MDM Administrator Guide.

Apps@Work supports AtWork and migrated clients: You can transition to Apps@Work native experience from the Ivanti Go application. The Apps@work native appstore is deployed automatically with the client. For newly created tenants, no action is required from the administrator. The Apps@work tab is displayed on the client task bar and end users can view and install their company approved apps from Apps@Work. For newly created tenants, the administrator can distribute the Apps@work Webclip configuration to iOS and macOS devices. Starting from this release Apps@Work supports AtWork and migrated clients.

iOS 11 and iOS 12 are not supported: Starting from this release of Ivanti Go, iOS 11 and iOS 12 are not supported.

Support for device compliance on AtWork: Ivanti Go now supports AAD Compliance on AtWork.

AAD re-registration screen is removed: After the AAD password is changed or reset, the AAD Re-Registration screen will not continue to display.

Apps@Work available from Ivanti Go for iOS: You can transition to Apps@Work native experience from Ivanti Go application. The Apps@work native appstore is deployed automatically with the client. For newly created tenants no action is required from the administrator. The Apps@work tab is displayed on the client task bar and end users can view and install their company approved apps from Apps@Work. For newly created tenants the administrator can distribute the Apps@work Webclip configuration to iOS and macOS devices.

Auto-register Ivanti Go device users using QR code or link: As a convenience, instead of iOS device users manually entering registration credentials, you can set up an infrastructure to use a QR Code to automatically enter the registration credentials for the device user. You can log in to the Ivanti Neurons for MDM user portal to generate the QR code and register your iOS device by scanning the QR code from the Ivanti Go client application. This capability is supported for iOS 13 and higher versions.

Support to recognize and display deep links sent through notification: Ivanti Go for iOS now recognizes and display multiple deep links sent through notifications. Users can click on the link to redirect to the linked web-page.

Hungarian and Swedish language support: Ivanti Go for iOS now supports Hungarian and Swedish language.