Automate iOS Device Management
Workspace ONE admins gain advanced deployment and device management controls over corporate owned or school owned devices through Apple Business Manager and School Manager integration.
This ensures the highest levels of access security – backed by certificate-based authentication, device security, and data leakage protection.
Enable seamless employee productivity on personal devices while maintaining full privacy and data separation with Workspace ONE.
Whether choosing MDM enrollment, iOS user enrollment, or a secure PIM container, employees are assured frictionless access to work apps, email, calendar, contacts, intranet sites and content repositories from the convenience of their own device.
Through integration with Apple Business Manager and Managed Apple IDs, admins can onboard supported iPads in a “shared” mode. This allows multiple users (e.g. shift workers) to access a single shared device, and experience a personalized session once checked-in. Workspace ONE resets and reconfigures the iPad between sessions so that the next user signing in has their own unique experience.
Continue work anywhere, no matter the disruption. Through powerful integration across access management, unified endpoint management (UEM), analytics, virtualization, and endpoint security, Workspace ONE uniquely ensures business continuity.
Frequently Asked Questions
- Automated, out-of-the-box device activation and configuration with User Enrollment.
- Unified app catalog enables self-service for users as well as admin-controlled app download and management.
- Shared device mode allows multiple users to customize experiences via check-in/check-out.
User enrollment is a new BYOD enrollment scenario with an intense focus on user privacy. On a user-enrolled device, organizations can enable the user’s work experience by providing apps, content, and SSO, but do not gain access to full device management or device-unique identifying information.
The newest method is enrolling with Apple's User Enrollment, a method that automatically separates work and personal data on devices. It protects user's privacy while securing enterprise resources. Or users can gain access to apps and other resources by logging into Workspace ONE Intelligent Hub.
Workspace ONE uses the native iOS Kerberos capabilities along with technology developed in VMware Workspace ONE Access that provides a bridge between SAML and Kerberos for authentication. Check out this whitepaper for more information.
iPads can be shared between users with a check-in and check-out process. With Workspace ONE Intelligent Hub, users sign-in to an iOS device to use the apps and content to which they’re assigned, then sign-out when they’re done (making the iOS device ready for the next user).
Workspace ONE Intelligent Hub provides a consistent experience across all Apple platforms (iOS, iPadOS, macOS) with a unified app catalog – consisting of SaaS, Native and Virtual apps with Single Sign On. It is a one-stop shop for resources including People Search, Support and corporate communication.