Deploying Applications Using Workspace ONE on Apple iOS

To deploy Ivanti managed applications:

1. From Workspace ONE, select Resources > Apps > Native > Public > Add Application.

   

2. In the Managed by field, select the organization group by which this app will be managed.

   

3. Select Apple iOS from the Platform list.

4. Search for the application by doing one of the following:

   • Click Search App Store and specify the name of the application, and then click Next. For example: Ivanti Secure Access Client

   • Click Enter URL and type in the application URL, and then click Next.

5. From the search list, click the Select option next to the application.

   

6. In the Add Application window, enter application details, terms of use and SDK profile details, and then click Save and Assign.

   

7. In the Distribution window displayed:

   1. Enter a name for the application distribution.

      

   2. Select one or more Assignment Groups that will have access to the app.

   3. Select App Delivery Method:

      • Auto: pushes the application to the device automatically.
      • On Demand: deploys the app when needed.

8. Click Create and then Save to preview the assigned devices.

   

9. Click Publish to push the App Catalog to the endpoints in the Groups that you assigned.

   

Configuring Per-app VPN, Always On VPN / On Demand VPN for iOS Endpoints Using Workspace ONE

Per-app VPN allows iOS devices to establish VPN connections only for specific apps, while other traffic goes through the normal network.

In an Always On VPN configuration, the connection is always on. The traffic that matches specific filters is always routed through the ICS tunnel.

To configure Per-app VPN:

1. From the Workspace ONE console, select Resources > Profiles & Baselines > Profiles > ADD, and then select Add Profile.

2. Select iOS from the Platform list.

   

3. Select Device Profile from the Select Context window.

4. Type in a name and description for the profile.

   

5. If your deployment requires client certificate authentication, configure the Credentials settings.

   To upload a client certificate manually:

   1. Set the Credential Source to Upload.
   2. Enter a Credential Name.
   3. Click Choose File to locate and select the certificate that you want to upload.

   4. After you select a certificate, click SAVE.

      

   To create the credential source for certificate authentication, choose SCEP.

   1. Set the Credential Source to Defined Certificate Authority.

   2. Select the Certificate Authority from which you want obtain certificates.

   3. Select the Certificate Template for the certificate authority.

      

6. Configure the VPN settings:

   1. Enter the Connection Name that the endpoint displays.

   2. Select Pulse Secure (Legacy) from the Connection Type list.

   3. Enter the Server host name.

   4. Specify the Realm name and user Role.

      

   5. Enable Per-App VPN Rules to establish VPN connections only for the managed apps.

   6. Enable Connect Automatically to force the secure connection to be always on.

   7. Select Provider Type from the list according to L3/L4 connection.

   8. Enable the required domains.

   9. Select Certificate as User Authentication.

   10. Enable VPN On Demand.

   11. Enable Use new on-demand keys and define the rules for VPN On Demand connection.

       

   12. Click Save and Publish.