New features and enhancements summary

This section provides summaries of new features and enhancements developed for the current release of Mobile@Work for Android. References to documentation describing these features are also provided, when available.

• Mobile@Work features and enhancements
• Wear OS watch app features and enhancements
• MobileIron Threat Defense features

For new features and enhancements provided in previous releases, see the release notes for those releases, available in Mobile@Work for Android Product Documentation.

Mobile@Work features and enhancements

This section summarizes new features and enhancements that are common to all platforms.

  • Android Enterprise apps can now be auto-launched after installation: Administrators can now force the auto-launching of Android Enterprise apps after their installation. A typical use case would be for a security/VPN app that needs to be configured by the device user before the device can be protected. Applicable to Android devices version 6.0 through the latest version as supported by MobileIron.

  • Support for Samsung Knox Dual Encryption (DualDAR): Support for Dual Encryption (DualDAR) has been added to further secure and protect sensitive data on devices. Samsung Knox includes a FIPS 140-2 certified encryption module within the inner layer of the encryption. DualDAR is applicable to Knox v3 on Android 8.0 devices through the latest version as supported by MobileIron. It applies to Android Enterprise Work Profile mode, and Managed Device with Work Profile mode.

  • Sending feedback and Log files instructions updated: The text in Settings > Send Logs has been updated to make instructions clearer to the device user.

  • Ability to control Unknown sources:Administrator can use two Lockdown options to control unknown sources. Both options are available in Android Enterprise settings:

    • Allow unknown sources in personal profile option is one of the Work Profile Lockdown Settings.

    • Allow install from unknown sources on the device option is one of the Managed Devices with Work Profile Lockdown Settings.

  • OAuth endpoint for mutual certification authentication: New mutual authentication device endpoints are available for use by Android clients for all communications needed to support self-service (My Devices) portal.

  • Support Direct Boot mode: Direct Boot mode allows administrators to perform the Unlock and Wipe device actions even when the device is locked after reboot. This mode is supported on Android 7.0 through the latest version as supported by MobileIron.

  • FIDO (Fast ID Online) devices appear in the Authenticate list: Mobile@Work includes FIDO authenticators and FIDO registered desktops on the Authenticate screen when Mobile@Work prompts the device user to authenticate. The device user can select the FIDO device and remove it.  

  • Zero Sign-on notifications Yes/No buttons switched: For customers' ease, in the Zero Sign-on and FIDO notifications, the Yes/No action buttons have been switched. "Yes" now appears on the right and "No" appears on the left.

  • Cross profile whitelisting of Apps: In the Lockdown policy, the "Enable Cross profile whitelisting of Apps" setting, when enabled, allows the users to share information from specific apps from within the work profile to the personal side of the Android 11+ devices. This setting is under the Android 11+ settings and is disabled by default.

Wear OS watch app features and enhancements

This section summarizes new features and enhancements related to the Wear OS  watch app that requires and pairs with the latest version of Mobile@Work for Android.

There are no new features and enhancements for the Wear OS watch app.

MobileIron Threat Defense features

MobileIron Threat Defense protects managed devices from mobile threats and vulnerabilities affecting device, network, and applications. For information on MobileIron Threat Defense-related features, as applicable for the current release, see the MobileIron Threat Defense Solution Guide for Core, available on the MobileIron Threat Defense for Core Documentation Home Page at MobileIron Community.

NOTE: Each version of the MobileIron Threat Defense Solution guide contains all MobileIron Threat Defense features that are currently fully tested and available for use on both server and client environments. Because of the gap between server and client releases, MobileIron releases new versions of the MobileIron Threat Defense guide as the features become fully available.