Mandatory and optional in-house and secure apps
An Android in-house app made available through the App Catalog can be designated as a mandatory app, which means that the app is always installed on the devices matching the app’s labels. An app that is not marked as mandatory is optional, and enables the users to decide whether or not to install the app on their devices. The in-house app can be either an AppConnect app (secure app) or a regular, non-AppConnect app.
NOTE: | Designating the Secure Apps Manager as optional and all secure apps as optional means that the device user sets up the secure apps container on-demand. See On-demand secure apps container setup. |
NOTE: | To set the prerequisite app for a dependent app, see App Management Action Workflows. |
Silent install and uninstall of mandatory apps
You can specify that mandatory in-house apps and secure apps are silently installed and uninstalled on:
- Samsung Knox devices MDM version 1.0 and through the most recently released version as supported by MobileIron
- Zebra MX running version 4.4 and through the most recently released version as supported by MobileIron
- LG devices that support silent installation - The LG device must be running:
- Android 7.0 through the most recently released version as supported by MobileIron
- Mobile@Work 9.7 for Android through the most recently released version as supported by MobileIron
The Silent install for Mandatory Apps feature eliminates any dependency on the device user to install or uninstall the app. Also, when you retire a device (when, for example, it is lost or stolen or the employee has left the company), the silently installed in-house and secure apps are silently uninstalled, thereby protecting the apps and their data.
Note The Following:
- Samsung Knox devices prevent the user from uninstalling the app.
- Silent install and uninstall are not supported on MAM-only Android devices.
- Silent install and uninstall are not supported for apps from the Google Play Store.
- AppConnect apps are not supported on devices using the Samsung Knox container. Do not install AppConnect apps if you are using the Samsung Knox container on the same device.
Uninstall behavior for silently installed apps
Installed apps are silently uninstalled when:
-
No label maps the in-house or AppConnect app to the device.
You apply labels to in-house and AppConnect apps to make the apps available to devices. Removing the label from the app or the device causes Mobile@Work to uninstall the app.
- You retire the device.
- You remove the in-house or AppConnect app from MobileIron Core.
Whether device users are notified to install a mandatory app
Although a mandatory app is always installed on the device, whether the device user sees a notification to install the app depends on whether the silent installation feature is enabled. The following table specifies when a device user sees the notification:
Is app marked for silent installation? |
Samsung Knox, Zebra, and LG devices that support silent installation |
Devices that do not support silent installation |
Yes |
Silently installed with no notification to user |
Notification to user to install |
No |
Notification to user to install |
Notification to user to install |
Device user experience with uninstalling a mandatory app
The device user experience when attempting to uninstall a mandatory app depends on the type of device, as specified by the following table:
|
Samsung Knox |
Zebra devices that support silent install/uninstall |
LG devices that support silent install/uninstall |
Devices that do not support silent install/uninstall |
Can device user uninstall a mandatory app when the silent install/uninstall feature is enabled? |
No |
Yes, but the app will be silently reinstalled. |
Yes, but the app will be silently reinstalled. |
Yes, but the device user will be notified to re-install the app. |
Can device user uninstall a mandatory app when the silent install/uninstall feature is not enabled? |
No |
Yes, but the device user will be notified to re-install the app. |
Yes, but the device user will be notified to re-install the app. |
Yes, but the device user will be notified to re-install the app. |
Designating an in-house app as optional or mandatory
After you have added the app to the App Catalog, you can designate whether it is an optional or mandatory app.
The below procedure applies to:
- Android in-house apps
- iOS in-house and public apps
- MacOs in-house and public apps
- AppConnect apps
Procedure
- In the MobileIron Core Admin Portal, go to Apps > App Catalog.
- Select an app and then select Actions > Apply to Labels.
- In the Apply to Labels dialog box, select the check box next to the app's name.
- Click in the Mandatory field, a drop-down displays. Selecting Yes makes the selected app mandatory; leaving it to the default No makes the app optional.
- Click Apply.
Enforcement of specific app versions for mandatory in-house apps