Apps@Work in Ivanti Mobile@Work for Android

Apps@Work enables device users to view, install, update, reinstall, and search for the apps made available to them by the Ivanti EPMM administrator. On Android, Apps@Work is available to users as a menu item in the Ivanti Mobile@Work app. Apps@Work authenticates to Ivanti EPMM using either certificate authentication or token-based authentication.

Apps@Work displays the apps that you make available to the device through labels. In the Ivanti EPMM Admin Portal, you assign an app to one or more labels. A device that is assigned to the same label as the app will have access to that app in Apps@Work.

Within Apps@Work, apps are organized into the Featured and Category tabs. If you have enabled ratings and reviews, the device user sees reviews, and can rate apps and write reviews. You can choose apps to be displayed as Featured Apps in the Apps@Work home screen.

Apps@Work for Android authentication to Ivanti EPMM

You determine whether Apps@Work authenticates to Ivanti EPMM using:

  • Token authentication - Apps@Work uses a token to authenticate to Ivanti EPMM. Ivanti EPMM sends Ivanti Mobile@Work the token when it registers with Ivanti EPMM.

  • Certificate authentication - Apps@Work authenticates to Ivanti EPMM using an identity certificate.

    This certificate is specified by the certificate enrollment setting in the mutual authentication setting in the Ivanti EPMM Admin Portal at Settings > System Settings > Security > Certificate Authentication.

    Using certificate authentication for Apps@Work on Android devices requires:

    • mutual authentication is enabled on Ivanti EPMM.
    • the device is running Ivanti Mobile@Work 10.2.0.0 or newer versions.
    • the device is running Android 5.0 or newer versions.

Note the following:

  • If certificate authentication is selected, but some of the requirements for certificate authentication are not met, token-based authentication is used.

  • If certificate authentication is selected, and all of the requirements for certificate authentication are met, if the authentication fails for some reason, the device user cannot use Apps@Work. There is no fallback to using token-based authentication in this case.

  • By default, certificate authentication is selected.

Related topics 

Configuring Apps@Work for Android authentication to Ivanti EPMM

To configure how Apps@Work authenticates to Ivanti EPMM:

Procedure 

  1. In the Ivanti EPMM Admin Portal, go to Apps > Apps@Work Settings.

  2. To enable certificate authentication to Ivanti EPMM, in the App Storefront Authentication box, select Certificate Authentication.

    Note that requirements for using certificate authentication are listed in Apps@Work for Android authentication to Ivanti EPMM. If any of these requirements are not met, Apps@Work uses token-based authentication to authenticate to Ivanti EPMM, even when Certificate Authentication is selected.

  3. To disable certificate authentication to Ivanti EPMM, and use only token-based authentication, in the App Storefront Authentication box, deselect Certificate Authentication.

    Note that deselecting certificate authentication also means that Apps@Work on iOS devices does not use certificate authentication.

Related topics 

Adding apps to Apps@Work for Android devices

Apps in the App Catalog must be assigned to one or more labels to be available in Apps@Work on the devices.

Procedure 

  1. In the Ivanti EPMM Admin Portal, select Apps > App Catalog.
  2. Select Android from the Platform list.
  3. Select the app you want to work with.
  4. Click Actions > Apply to Label.
  5. Select the label that represents the Android devices on which you want the selected app to be listed.

  6. If, during the installation of the selected app, the Enforce this version for Mandatory Apps field was selected (checked), the Apply to Label dialog box will display Yes in the Mandatory field. Otherwise, the Mandatory field displays No.

  7. Click Apply.

    To set the prerequisite app for a dependent app, see App management action workflows.

Device user experience of Apps@Work on an Android device

The device user taps Apps@Work on the menu in Ivanti Mobile@Work to access the app store. Apps@Work organizes the apps under three main tabs:

  • Featured tab
    • The featured screen lists all apps that are designated as featured apps by the administrator.
  • Categories tab
    • An app can be listed under Featured as well as under multiple categories.
    • Uncategorized apps are displayed under Uncategorized in the Categories tab.
    • Only categories that have at least one app are displayed.
    • Categories are defined by administrators as they add apps in the App Catalog in Ivanti EPMM.
  • Updates tab
    • When a user’s device checks in, the Update tab displays a badge number indicating the number of in-house and public app updates available for the device user to download. Once the user updates the apps, the badge number will disappear on next device check-in.

Apps are listed in alphabetical order.

Notification of newly-published apps

When a featured app or an update to an installed app is published to device users, those users receive a notification in the form of a badge that appears next to the appropriate app list. The number on the badge indicates the number of apps available.

If the user deletes a published app, that app will not become available for reinstalling again until the next sync interval causes Ivanti EPMM to be updated. You can address device user concerns by using the Force Device Check-In command to force Ivanti Mobile@Work to update Ivanti EPMM.

App details in Apps@Work on an Android device

Tap the app to view its details screen. If the administrator enabled ratings and reviews, tap the Reviews tab to read reviews, or write a review if you have already installed the app.

One of the following buttons appears on the details screen:

  • View: takes you to view or install the app in the Google Play Store.
  • Install: installs the app.
  • Reinstall: downloads and reinstalls the app.
  • Open: launches the app.

Searching for an app in Apps@Work on an Android device

Tap the search icon on the title bar to initiate a search within Apps@Work. Type any part of an app’s name and tap the return key. The search results are displayed. Tap Cancel next to the search text entry box to exit search mode.

Localized Apps@Work on an Android device

Apps@Work is available translated to the languages supported by Ivanti Mobile@Work. The text and messages in Apps@Work appear in the device’s local language when the language is enabled in the Ivanti EPMM language preferences.

To enable languages in the Ivanti EPMM Admin Portal:

  1. Go to Settings > System Settings > General > Language.
  2. In the Language section, select the desired languages.
  3. Click the right arrow to move the selection to Enabled Languages.