App restrictions configuration setting

This feature applies only to iOS devices.

The app restrictions configuration setting allows you to whitelist or blacklist managed apps in the App Catalog on MobileIron Core. Creating a whitelist restricts device users to viewing on their devices only apps explicitly listed in the whitelist. Creating a blacklist restricts device users from viewing or launching blacklisted apps on their devices. You can also blacklist apps from the Apple App Store.

You can create more than one whitelist or blacklist, but MobileIron Core will only send one app restriction setting to devices. There is no default app restrictions configuration. If you configure both a blacklist and a whitelist, then Core removes all blacklisted apps from the whitelist, and sends only the whitelist to devices. If you apply one or more app restriction configurations to a label, then MobileIron Core combines all app restriction configurations and sends it to the devices belonging to that label.

After you have created a blacklist, you cannot convert it to a whitelist.

NOTE: This feature applies only to supervised devices running iOS 9.3 through the most recently released version as supported by MobileIron.
NOTE: This setting does not apply to tvOS devices.

Whitelisting managed iOS apps

Creating a whitelist of managed apps allows you to specify the apps you want to be visible to device users on their devices. You can whitelist apps from the App Catalog in MobileIron Core. Core hides from the device user any app that is not whitelisted.

NOTE: This feature applies only to supervised devices running iOS 9.3 through the most recently released version as supported by MobileIron. You cannot whitelist a web clip. This is an Apple limitation.

Procedure 

  1. Select Policies & Configs > Configurations.
  2. Click Add New.
  3. Select Apple > iOS / tvOS > App Restrictions. The New App Restrictions Configurations dialog box opens.
  4. In the Name field, enter a name for the app restriction configuration. Optionally, enter a description for the app restriction configuration in the Description field.
  5. Under App Restrictions, select Create a Whitelist.
  6. Click Add > App Catalog.

    A new row is added to the table of apps.

  7. In the table, click the cell in the App Name column, and begin typing the app name you want to blacklist.

    A drop-down list of App Catalog apps appears.

  8. From the drop-down list, select the App Catalog app you want to blacklist.
  9. Repeat steps 6-8 for any additional apps you would like to whitelist.
  10. Click Save.
  11. Select the app restrictions configuration you created.
  12. Select Actions > Apply to Label.
  13. Select the labels to which you want to apply the provisioning profile, such as iOS.
  14. Click Apply.

Blacklisting iOS apps

Creating a blacklist allows you to specify particular apps you want to prevent device users from viewing or running.

You can select apps to blacklist in the following ways:

  • From an Apple App Store: You can blacklist a public app from a particular Apple App Store by first choosing the Apple App Store and then searching for the app.
  • From the App Catalog: You can blacklist a particular managed app from the App Catalog on MobileIron Core.
  • Manually: You can blacklist a particular app by manually entering its name or bundle ID.

This feature applies only to supervised devices running iOS 9.3 through the most recently released version as supported by MobileIron.

Procedure 

  1. Select Policies & Configs > Configurations.
  2. Click Add New.
  3. Select Apple > iOS / tvOS > App Restrictions. The New App Restrictions Configurations dialog box opens.
  4. In the Name field, enter a name for the app restriction configuration. Optionally, enter a description for the app restriction configuration in the Description field.
  5. Under App Restrictions, select Create a Blacklist.
  6. To blacklist an app from the Apple App Store:
    • Click Add > iTunes Store to select the particular Apple App Store where the app can be found. A row is added to the table of apps.
    • In the App Name column, search for the app in the App Store by entering the app name.
    • From the drop-down list that appears, select the relevant app.
  7. To blacklist an app from the App Catalog on MobileIron Core:
    • Click Add > App Catalog. A row is added to the table of apps.
    • In the table, click the cell in the App Name column, and begin typing the app name you want to blacklist.
    • From the drop-down list that appears, select the App Catalog app you want to blacklist.
  8. To blacklist an app manually:
    • Click Add > Enter Bundle ID. A row is added to the table of apps.
    • In the table, click the cell in the App Name column and enter the name of the app you want to blacklist.
    • Alternatively, click the cell in the Bundle ID column, and enter the bundle ID of the app you want to blacklist.
  9. For any other apps you want to blacklist, repeat steps To blacklist an app from the Apple App Store: Click Add > iTunes Store to select the particular Apple App Store where the app can be found. A row is added to the table of apps.In the App Name column, search for the app in the App Store by entering the app name. From the drop-down list that appears, select the relevant app., To blacklist an app from the App Catalog on MobileIron Core:Click Add > App Catalog. A row is added to the table of apps. In the table, click the cell in the App Name column, and begin typing the app name you want to blacklist.From the drop-down list that appears, select the App Catalog app you want to blacklist. , or To blacklist an app manually: Click Add > Enter Bundle ID. A row is added to the table of apps. In the table, click the cell in the App Name column and enter the name of the app you want to blacklist.Alternatively, click the cell in the Bundle ID column, and enter the bundle ID of the app you want to blacklist..
  10. Click Save.
  11. Select the app restrictions configuration you created.
  12. Select Actions > Apply to Label.
  13. Select the labels to which you want to apply the provisioning profile, such as iOS.
  14. Click Apply.