How to Configure & Use an MDM
Overview
Mobile Device Management (MDM) is the administration of mobile devices such as smartphones, tablet computers, laptops and headsets including the HoloLens. It allows a company to remotely manage devices that are used by employees, contractors, etc. It can be used to broadly install applications such as the WorkLink app, and set configurations such as server settings.
Configuration
The constant that will be persistent across whatever MDM you use, and whatever platform you are configuring WorkLink for, is what specifically you can configure. The configuration is basically a dictionary of values that get passed to WorkLink on startup, as well as when the configuration changes in the MDM. We currently allow 4 values to be configured via an MDM. They are listed in the table below.
UWP and HoloLens have a slightly different format for setting the key/value pair. These are called OMA-URIs (Open Mobile Alliance – Uniform Resources). These are basically paths to configurations set by your MDM. There is a separate one for both apps in the Microsoft App Store and side-loaded .appxbundles. The key to OMA-URI mapping is included in the table. These follow a pattern of ./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/<AppStore or nonStore>/<App_Package_Family>/AppSettingPolicy/<Configuration_Key>
Key | Description | OMA-URIs (UWP / HoloLens Only) |
cmsUrl | This allows you to pre-configure a custom CMS deployment that the app will make all of it’s requests against. This includes authentication, pulling scenario data, company data, etc… |
App Store: ./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/ScopeAR.RemoteAR_qw0sdg9ragx7y/AppSettingPolicy/customCMS Sideload: ./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/nonStore/ScopeAR.RemoteAR_qw0sdg9ragx7y/AppSettingPolicy/customCMS |
proxyUrl |
This allows you to pre-configure a proxy server that you would like WorkLink to route network traffic through. |
App Store: ./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/ScopeAR.RemoteAR_qw0sdg9ragx7y/AppSettingPolicy/proxyAddress Sideload: ./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/nonStore/ScopeAR.RemoteAR_qw0sdg9ragx7y/AppSettingPolicy/proxyAddress |
proxyUsername |
This is the pre-configured username for authenticating with the above proxy server |
App Store: ./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/ScopeAR.RemoteAR_qw0sdg9ragx7y/AppSettingPolicy/proxyUsername Sideload: ./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/nonStore/ScopeAR.RemoteAR_qw0sdg9ragx7y/AppSettingPolicy/proxyUsername |
proxyPassword |
This is the pre-configured password for authenticating with the above proxy server |
App Store: ./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/ScopeAR.RemoteAR_qw0sdg9ragx7y/AppSettingPolicy/proxyPassword Sideload: ./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/nonStore/ScopeAR.RemoteAR_qw0sdg9ragx7y/AppSettingPolicy/proxyPassword |
Example Configuration using Microsoft Intune
iOS App Store WorkLink Configuration
- In the Intune dashboard, select the Apps tab on the left
- Select “App Configuration Policies” on the left
- Select “Add”
- Select “Managed Devices“ in the dropdown
- Enter a Name, Description, and set the platform to iOS / iPadOS / Android Enterprise
- Press Select App, then Add “WorkLink by Scope AR”
- Set the “Configuration settings format” to “Use Configuration Designer”
- Enter a key, such as “cmsUrl”, set “Value type” to “String”, and enter a value such as “cms.scopear.com”, then hit “Next”
- Configure your groups so the correct users are included and excluded from the configuration policy, then hit “Next”
- Press “Create”
Android Play Store WorkLink Configuration
- In the Intune dashboard, select the Apps tab on the left
- Select “App Configuration Policies” on the left
- Select “Add”
- Select “Managed Devices“ in the dropdown
- Enter a Name, Description, and set the platform to iOS / iPadOS / Android Enterprise
- if you selected Android Enterprise, you will need to set “Profile Type” to All Profile Types
- Press Select App, then Add “WorkLink by Scope AR”
- If the app you select does not have any configuration values set, the “Configuration Settings Format” setting will not appear in the next step.
- Under “Configuration Settings Format”, select “Use configuration designer”
- Hit Add, and select one of the pre-configured settings such as “CMS URL”
- Enter a value such as “cms.scopear.com”, then hit “Next”
- Configure your groups so the correct users are included and excluded from the configuration policy, then hit “Next”
- Press “Create”
UWP / Hololens Microsoft Store WorkLink Configuration
- In the Intune dashboard, select the Devices tab on the left
- Select “Configuration” on the left
- Select “Create”
- Select “New Policy“ in the dropdown
- Select “Windows 10 and later” under Platform
- Select “Templates” under “Profile type”, search for “Custom”, select it, then press “Create”
- Enter a Name and Description
- Select “Add”
- Add the specific key (e.g. “cmsUrl”), enter a description, add the OMA-URI (listed above for appstore or non app store), select the “String” data type, and enter a value (e.g. “cms.scopear.com”)
- Press “Save”, and repeat 8-10 for any other keys you want to include
- Press “Next”
- Configure your groups so the correct users are included and excluded from the configuration policy, then hit “Next”
- Set applicability rules if necessary and hit “Next”
- Press “Create”