Adding the PIV-D Manager app for iOS to the App Catalog
Applicable derived credential providers and device platforms
|
Derived credential providers |
Entrust, DISA Purebred |
|
Device platforms |
iOS |
Device users use the PIV-D Manager app for iOS to use derived credentials on iOS devices. You add the app to the App Catalog, configuring it to have a AppConnect custom configuration. The key-value pairs you configure in the AppConnect custom configuration depend on the derived credential provider.
Procedure
| 1. | In the Admin Portal, go to Apps > App Catalog. |
| 2. | Click +Add. |
| 3. | Select iOS Store to search the Apple App Store. |
| 4. | Enter MobileIron PIV-D Manager in the search field. |
| 5. | Select the MobileIron PIV-D Manager app that displays. |
| 6. | Click Next. |
| 7. | Click Next. |
| 8. | Click Next. |
| 9. | Select the users and user groups that you want to distribute the app to. |
| 10. | Click Next. |
| 11. | Scroll down to AppConnect Custom Configuration. |
| 12. | Select + to add a new AppConnect custom configuration. |
| 13. | Enter a name for the AppConnect custom configuration. |
| 14. | In the AppConnect Custom Configuration section, add the case-sensitive key-value pairs, depending on the derived credential provider: |
Table 1. Key-value pairs for PIV-D Manager when using Entrust
|
Key |
Value |
Description |
|
Required key and value MI_CREDENTIAL_ACTIVATION_URL |
${pivdActivationLink} |
Entrust provides the activation URL to MobileIron Cloud when the user requests a derived credential on the MobileIron Cloud Self-Service Portal. The PIV-D Manager app receives the value when the user launches the app on the device. |
|
Optional key and value MI_CREDENTIAL_DEVICE_ID |
A MobileIron Cloud substitution variable that uniquely identifies the device. Examples: ${deviceClientDeviceIdentifier} ${deviceUDID} ${deviceIMSI} |
This key-value pair contains a unique device identifier that the PIV-D Manager app sends to the Entrust IdentityGuard server. This identifier allows an administrator to determine which device contains a given derived credential, allowing control around auditing and revocation. |
Table 2. Key-value pairs for PIV-D Manager when using DISA Purebread
|
Key |
Value |
Description |
|
MI_CREDENTIAL_ENABLE_PUREBRED |
True |
Enables the PIV-D Manager app to support DISA Purebred derived credentials |
| 15. | Select the users and user groups that you want to distribute the AppConnect custom configuration to. |
| 16. | Click Next. |
| 17. | Click Done. |