Setting up Apps@Work for iOS and macOS

iOS device users cannot use Apps@Work by default. You must first set up Apps@Work for iOS by completing the following tasks:

  1. Set authentication options.
    See Setting authentication options for Apps@Work for iOS devices.
  2. Optionally, customize the icon for Apps@Work.
    See Apps@Work branding
  3. Optionally, enable users to rate Apps@Work apps.
    See Enabling device users to rate and review apps in Apps@Work
  4. Send the Apps@Work web clip to iOS devices.
  5. See Sending the Apps@Work web clip to iOS and macOS devices.
    If you do not complete this step, then iOS devices will not have access to Apps@Work.

Note the following:

  • Because the Apps@Work web clip is deployed like any other configuration, there might be a considerable lag between device registration and the appearance of the web clip.
  • As a web clip, Apps@Work is impacted by web content filters, available in supervised devices. Make sure your web content filters do not block access to Ivanti EPMM. If Ivanti EPMM access is blocked, Apps@Work cannot work. For more information, see “Web content filter settings” in the Ivanti EPMM Device Management Guide.

Setting authentication options for Apps@Work for iOS devices

By default, certificate-based authentication is enabled. Releases prior to Ivanti Endpoint Manager Mobile 11.7.0.0 also have HTTP basic authentication available, but enabling it is not recommended. This setting applies to both the Apps@Work iOS web clip and the Apps@Work container app for iOS.

Change the Apps@Work Port setting in the System Manager if all of the following are true:

  • You are using certificate-based authentication for Apps@Work for iOS.
  • You have enabled mutual authentication for devices at Settings > System Settings > Security > Certificate Authentication.
  • You are using the iOS Apps@Work web clip.

To change the Apps@Work Port setting, see "Port Settings" in the Ivanti EPMM System Manager Guide.

Related topics 

  • “Enabling mutual authentication for Apple and Android devices” in Ivanti EPMM Device Management Guide for iOS and macOS devices
  • "Port Settings" in the Ivanti EPMM System Manager Guide.
  • Apps@Work in Ivanti Mobile@Work for Android

Enabling device users to rate and review apps in Apps@Work

You can optionally allow users to rate and review the apps you push to Apps@Work.

Procedure 

  1. In the Ivanti EPMM Admin Portal, go to Apps > Apps@Work Settings.
  2. Under App Storefront Reviews and Ratings, select Enable Ratings and Reviews for iOS, macOS and Android.
  3. Click Save.

Related topics 

Malware prevention: app reputation

Sending the Apps@Work web clip to iOS and macOS devices

Ivanti EPMM sends the Apps@Work web clip to iOS and macOS devices only after you assign the iOS and macOS labels to the web clip, respectively.

On iOS and macOS devices, the Apps@Work web clip is only supported on the Safari web browser.

Procedure 

  1. In the Ivanti EPMM Admin Portal, go to Policies & Configs > Configurations.
  2. Select the WEBCLIP configuration type called System - iOS Enterprise AppStore.
  3. Go to Actions > Apply to Label.
  4. Select the iOS or the macOS label, or both.

  5. Click Apply.
    Ivanti EPMM automatically applies the iOS and macOS labels to the System - iOS Enterprise AppStore SCEP setting, enabling Apps@Work to authenticate with Ivanti EPMM.

    The Target Bundle Identifier in the above configuration is applicable to all other webclips except Apps@Work.