Android (5.0 and later) has allowed MDM (Mobile Device Management) solutions to pass dictionaries directly in the applications, that can be downloaded through MDM. This functionality is supported by MaaS360. The dictionary reference contains settings that can be defined via MDM. The MDM enrollment setup skips all the prompts and user intervention for installation and activation of the inSync mobile app. This ensures that each user undergoes the same set of steps when enrolling their Android devices. For example, the dictionary contains configuration information about the server address, email address of the user, mass deployment token that is required for authenticating the user, and security information like allow or restrict copy, printing of files, and allow or restrict opening the files in different apps.
inSync uses App Configuration for Enterprise to support the inSync mobile app for Android devices with MaaS360. Many applications require users to enter URL, port, email address, and various configurations as part of a one-time setup of an application. These manual configurations can impact the adoption and success of an organization’s mobile app initiatives, increase the burden on a help desk fielding calls from users, and adds the burden of maintaining documentation that needs to be updated frequently as new updates to the application are made available.
Apps commonly implement the following types of configurations:
- Backend service configuration: URL, port, use SSL, group/tenant code
- User configuration: username, email, domain
As an inSync user, all you have to do is enroll the Android device, and install the inSync mobile app from MaaS360. In quick and easy steps, you can install and monitor the inSync mobile app on all Android user devices in your organization. This allows you to have complete visibility of all Android devices in your organization on which the inSync mobile app is installed.
Note: inSync mobile app installed through MaaS360 and enrolled using Android Enterprise does not support backup and restore functionalities.
Workflow when the inSync mobile app is launched for the first time
inSync administrator generates the mass deployment token from the inSync Master Management Console.
The mass deployment token allows you to distribute and silently activate the inSync mobile app on multiple Android devices.
For generating the mass deployment token, see the following topics:
inSync administrator executes the following tasks, and provides the information to MaaS360 Server:
MaaS360 Server syncs the mass deployment token, IP address, user's email ID, and configuration policies with the inSync mobile app.
inSync user launches the inSync mobile app on the Android device.
|5.||inSync mobile app uses mass deployment token, Server IP, and user's email ID provided by MaaS360 Server to authenticate with inSync Server.|
inSync Server sends device token to inSync mobile app.
|7.||The device token is saved securely in the Android decvice and is used for subsequent authentication.|
Workflow when the inSync mobile app is already authenticated
|1.||MaaS360 Server syncs the mass deployment token, IP address, user's email ID, and configuration policies with the inSync mobile app.|
|2.||inSync user launches the inSync mobile app on the mobile device. The inSync mobile app functions per the configuration and security policies that are configured at the MaaS360 Server.|
Workflow when the inSync mobile app is unauthorized
From the MaaS360 console, the MaaS360 administrator will disable or delete the user at the MaaS360 Server.
When the user is deleted from MaaS360, then the inSync mobile app that is on the user's device will be unauthorized. Additionally, the MaaS360 Server will automatically delete the inSync mobile app from the user's Android device.