Wi-Fi settings

To configure wireless network access, in the Admin Console, go to Policies & Configs > Configurations. Click Add New > Wi-Fi to create a new configuration.

NOTE: Do not assign multiple Wi-Fi profiles to a device if the Network Name SSID (Service Set Identifier) differs only by case. For example, if one profile has an SSID value of "yourco" and another has an SSID of "YourCo," those two must not be assigned to the same device. Doing so will cause check-in problems, and full device details will not be properly recorded.

Android 10 devices

On Android 10 devices through the latest version as supported by MobileIron, upon installation or upgrade, device users can configure Wi-Fi and location settings in specific modes.

NOTE: Administrators are required to leave in all modes of deployment to enable Wi-Fi and MTD configurations to be successfully applied. This means having the Allow the user to turn on location sharing lockdown field selected (checked.)

The table below depicts the behavior changes in different configuration modes:

Table 1. Wi-Fi changes in specific configuration modes

Item

Description

All modes

Disconnect Wi-Fi local action is disabled in all modes on Android 10 devices. For all modes of deployment, to enable Wi-Fi and MTD configurations to be successfully applied, the Allow the user to turn on location sharing lockdown field must be selected.

(Android Enterprise)

Work Profile mode
Work Profile on Company Owned devices (Android 11 through most recently released version as supported by MobileIron)

Device users are requested to activate location for the device and for the managed profile. In order for administrators to update Wi-Fi and to have Mobile Threat Defense detect Wi-Fi-based threats, device users must activate location. If the device user chooses No, the device will be flagged with an unblocking error for non-compliance and Core will report a configuration error.

Administrators will not be able to disable Wi-Fi through UEM configurations in Work managed device mode on Android 10 devices.

(Android enterprise)

Work Managed Device (COPE) mode

In the background, MobileIron will turn on the location services setting without device user intervention. Wi-Fi and MTD configurations should be successful with no errors. If there is no MTD configuration or a Wi-Fi configuration, the device user can switch location service on or off.

Device Administrator (DA) mode

Wi-Fi configurations will not be supported and will show as Sent on the server with config error. MTD configurations will be still accepted for non-network threats but the Wi-Fi related threats will not work for Device Administrators and MAM. Administrators will not be able to disable Wi-Fi through UEM configurations in Device Administrator mode on Android 10 devices.

Kiosk mode

Administrators wanting users to enable/disable Wi-Fi but not connect to any other Wi-Fi network settings are not supported. Options available to administrators are:

Scenario 1 - Administrators wanting users to enable/disable Wi-Fi and connect to any available Wi-Fi will need to have the following settings in Kiosk mode: Lockdown settings: Allow Wi-Fi (de-selected) and Allow Wi-Fi to be configured (de-selected). Kiosk Mode Settings: Allow users to Access Wi-Fi Settings (selected).
Scenario 2 - Administrators wanting to block users from any Wi-Fi controls will need to have the following Lockdown settings:
- Allow Wi-Fi (selected)
- Allow Wi-Fi to be configured (selected).