Quick start configuration for AppConnect for iOS

Complete these tasks to quickly set up AppConnect for iOS on MobileIron Core. However, for more information about each task, including details about all the settings, see the provided references and also details in Using AppConnect for iOS.

These quick start tasks are for adding AppConnect apps from the Apple App Store to the MobileIron Core App Catalog for distribution to iOS devices using the Apps@Work web clip.

Before you begin 

Set up the Apps@Work web clip. See “Setting up Apps@Work for iOS and macOS” in the Core Device Management Guide for iOS and macOS Devices.

Procedure 

  1. Adding AppConnect apps to Core for iOS AppConnect quick start.
  2. Enabling Core licensing options for iOS AppConnect quick start.
  3. Configuring the AppConnect global policy for iOS AppConnect quick start.
  4. Configuring the AppConnect container policy for iOS AppConnect quick start.
  5. Configuring settings specific to the app for iOS AppConnect quick start.
  6. Configuring email attachment control for iOS AppConnect quick start.

Adding AppConnect apps to Core for iOS AppConnect quick start

Many third-party AppConnect apps are available in the Apple App Store. By adding them to the MobileIron Core App Catalog, you can distribute them to devices using Apps@Work.

You can also add in-house AppConnect apps to the App Catalog. For details see “Using the wizard to add an in-house iOS or macOS app to the App Catalog” in the Core Apps@Work Guide.

Procedure 

  1. In the MobileIron Core Admin Portal, go to Apps > App Catalog.

  2. From the Quick Import drop-down list, select iOS.

  3. Enter the name of the app in the Application Name text box.

  4. Click Search.

  5. Select the app from the list that is displayed.

  6. Click Import.

  7. Click OK on the pop-up message, and close the App Store Search dialog.

    The app is now listed in the App Catalog. Information included in the app, such as the name, is automatically configured. All other settings, such as the Apps@Work category for the app, are set to default settings.

    TIP: To view and edit the settings for the app, click on the app name in the App Catalog.

  8. Select the app to apply the app to a label:

  9. Click Actions > Apply to Labels.

  10. Select the appropriate labels.

  11. Click Apply.

  12. Repeat this procedure for each AppConnect app that you want to distribute.

Next steps 

Continue to Enabling Core licensing options for iOS AppConnect quick start.

Related topics 

“Managing Mobile Apps for iOS” in the Core Apps@Work Guide.

Enabling Core licensing options for iOS AppConnect quick start

In the Admin Portal, in Settings > System Settings > Additional Products > Licensed Products, you specify whether you have a license for:

  • AppConnect for third-party and in-house apps
  • AppTunnel for third-party and in-house apps
  • Docs@Work
  • Web@Work

The following table shows which iOS secure apps you can deploy for each option. Select each option only if your organization has purchased it.

Table 15.   iOS secure apps you can deploy with each licensing option

If you enable Docs@Work, you can deploy:

If you enable AppConnect for third-party and in-house apps, you can deploy:

If you enable Web@Work, you can deploy:
  • Docs@Work
  • Web@Work

 
  • Email+ for iOS*
  • Insight*
  • Other third-party AppConnect apps*
  • In-house AppConnect apps
  • Web@Work

*In addition to purchasing the Additional Products option, these apps have an additional cost.

Procedure 

  1. In the Admin Portal, go to Settings > System Settings > Additional Products > Licensed Products.
  2. Select the appropriate options.
  3. Click Save.

Next steps 

Continue to Configuring the AppConnect global policy for iOS AppConnect quick start.

Configuring the AppConnect global policy for iOS AppConnect quick start

Using AppConnect for iOS requires that you configure an AppConnect global policy. This policy specifies settings that are not specific to a particular AppConnect app. For example, you configure the AppConnect passcode requirements, data loss protection requirements, and whether device users can use AppConnect apps that have no AppConnect container policy on the device.

This procedure shows using a new AppConnect global policy, but you can also edit the default AppConnect global policy.

  1. In the Admin Portal, select Policies & Configs > Policies.
  2. Select Add New > AppConnect.

  3. Set the AppConnect field to Enabled.

  4. Complete the form.

    Most fields default to suitable values.

  5. In the Security Policies section, select Authorize for the field Apps without an AppConnect container policy.

  6. Click Save.

    If you created a new AppConnect global policy, continue to the next step to apply it to the appropriate labels. You do not need to apply the default AppConnect global policy to a label.

  7. Select the policy.
  8. Select More Actions > Apply To Label.
  9. Select the labels to which you want to apply this policy.
  10. Click Apply.

Next steps 

Continue to Configuring the AppConnect container policy for iOS AppConnect quick start.

Related topics 

AppConnect global policy

Configuring the AppConnect container policy for iOS AppConnect quick start

This task is necessary only if:

  • You did not select Authorize for the field Apps without an AppConnect container policy in the AppConnect global policy. When Authorize is not selected, an AppConnect container policy is required to authorize an AppConnect app on a device.
  • You want to apply different data loss protection (DLP) settings for this app than the settings specified in the AppConnect global policy. These settings in the AppConnect container policy override the settings in the AppConnect global policy.

Note the following:

  • Make sure only one AppConnect container policy for a specific app is applied to each device.

  • Although this quick start procedure is for Apple App Store apps, note that for some in-house iOS AppConnect apps, MobileIron Core automatically creates an AppConnect container policy. Core keeps the automatically-created policy’s labels in sync with the labels you apply to the app. If you create additional AppConnect container policies for such apps, make sure to label the policies so that only one policy is applied to each device.

Procedure 

  1. In the Admin Portal, select Policy & Configs > Configurations.
  2. Select Add New > AppConnect > Container Policy.
  3. Enter a name for the policy.
  4. Enter a description for the policy.
  5. In the Application field, enter the bundle ID for the app. For example, the bundle ID for Email+ for iOS is com.mobileiron.ios.emailplus.
  6. Configure the iOS data loss prevention settings according to your requirements.
  7. Click Save.
  8. Select the policy you just created.
  9. Select More Actions > Apply to Label.
  10. Select the labels to which you want to apply this policy.
  11. Click Apply.

Next steps 

Continue to Configuring settings specific to the app for iOS AppConnect quick start.

Related topics 

AppConnect container policies

Configuring settings specific to the app for iOS AppConnect quick start

Using an AppConnect app configuration, you can configure settings that are specific to an AppConnect app. Because MobileIron Core provides these settings to the app, device users do not have to manually enter configuration details that the app requires. Each AppConnect app’s documentation should specify the necessary configuration. The configuration uses key-value pairs.

Note the following:

  • Make sure only one AppConnect app configuration for a specific app is applied to each device.

  • Although this quick start procedure is for Apple App Store apps, note that for some in-house iOS AppConnect apps, MobileIron Core automatically creates an AppConnect app configuration. Core keeps the configuration’s labels in sync with the labels you apply to the app. If you create additional AppConnect app configurations for such apps, make sure to label the AppConnect app configurations so that only one is applied to each device.

Procedure 

  1. In the Admin Portal, select Policy & Configs > Configurations.
  2. Click Add New > AppConnect > Configuration to create a new AppConnect app configuration.
  3. Enter a name for the app configuration.
  4. Enter a description for the app configuration.
  5. In the App-specific Configurations section, add key-value pairs, as specified by the app’s documentation.
    1. Click Add+.
    2. Enter the key name as provided by the app’s documentation.
    3. Enter the key value.
  6. Click Save.
  7. Select the app configuration you just created.
  8. Select More Actions > Apply to Label.
  9. Select the labels to which you want to apply this app configuration.
  10. Click Apply.

Next steps 

Continue to Configuring email attachment control for iOS AppConnect quick start.

Related topics 

AppConnect app configuration

Configuring email attachment control for iOS AppConnect quick start

This step is required only if:

  • You are deploying an AppConnect for iOS email app, such as Email+ for iOS.
  • You want to use the email attachment control feature in the Standalone Sentry,

Procedure:

  1. In the Admin Portal, go to Services > Sentry.
  2. Select the Standalone Sentry that handles ActiveSync for the devices.
  3. Select the edit icon.
  4. In the section Attachment Control Configuration, select Enable Attachment Control.
  5. For iOS And Android Using Secure Email Apps, select Open With Secure Email App.
  6. Click Save.

Related topics 

  • “Email Attachment Control with Standalone Sentry” in the Sentry Guide for Core.