Mobile device management (MDM) settings

Mobile device management (MDM) is a security software that allows organizations to monitor, manage, and secure mobile devices used by employees. MDM can be used to:

Secure devices
Update and configure devices
Monitor device compliance
Back up data
Limit the app usage

This section shows the available common MDM settings:

Managed Server X

For each server adding an individual key / value pair, key being "Managed Server X" where "X" is replaced by a number, starting by one and incrementing the number for each following server. Value is a JSON object whose format is:

For cloud servers

For cloud servers the same as in QR code used in the app:

{ 
   "cn":"Mobile App ION API ID",
   "ti":"tenant ID",
   "ci":"client ID",
   "pu":"oAuth host URL",
   "iu":"ION host URL",
   "cs":"client secret"
}

For on-premise servers not using ION API:


{ 
   "serverName":"name",
   "serverURL":"URL"
}

Example

Setting key Setting value

Managed Server 1

Setting key	Setting value
Managed Server 1	`{ "serverName":"Infor", "serverURL":"https://infor.com/DashboardsService" }`
Managed Server 2	`{ "ti":"BIADEINTEG_PRD", "cn":"BIMobileDashboards_Android", "ci":"Infor~7DNTxz8_Lm95KGUg9Rb6Sfw_ub58XV2tacBzXF8x_7Y", "cs":"", "iu":"https://m12test-ionapi.auto.aws.infor.com", "pu":"https://m12test-sso.auto.aws.infor.com:443/BIADEINTEG_PRD/as/", "oa":"authorization.oauth2", "ot":"token.oauth2", "or":"revoke_token.oauth2", "ru":"com.infor.dashboard://oidc_callback", "ev":"B1470343054", "v":"1.0", "dt":"1" }`
Managed Server 3	`{ "serverName":"Development", "serverURL":"https://internal.infor.com/DashboardsService" }`

{ 
   "serverName":"Infor",
   "serverURL":"https://infor.com/DashboardsService"
}

Managed Server 2

{ 
   "ti":"BIADEINTEG_PRD",
   "cn":"BIMobileDashboards_Android",
   "ci":"Infor~7DNTxz8_Lm95KGUg9Rb6Sfw_ub58XV2tacBzXF8x_7Y",
   "cs":"",
   "iu":"https://m12test-ionapi.auto.aws.infor.com",
   "pu":"https://m12test-sso.auto.aws.infor.com:443/BIADEINTEG_PRD/as/",
   "oa":"authorization.oauth2",
   "ot":"token.oauth2",
   "or":"revoke_token.oauth2",
   "ru":"com.infor.dashboard://oidc_callback",
   "ev":"B1470343054",
   "v":"1.0",
   "dt":"1"
}

Managed Server 3

{ 
   "serverName":"Development",
   "serverURL":"https://internal.infor.com/DashboardsService"
}

Allow customer server list (Boolean value)

If this option is set to False, the app user is not be allowed to scan QR codes from their device and should use only remote defined server configuration profiles. If this option is set to True and is changed to False, all custom servers in the app are deleted immediately.

If a user is connected to any of the custom servers at the time when the notification about changing this property, the user is logged off with the message: “Server Removed. You were logged off by your remote administrator. The current server was removed from your server list.”

Force Analytics (Boolean value)

Indicates whether the app shares Diagnostics and Analytics with Infor.

If this setting is omitted, the app asks the user about Analytics when the app is first started. It is possible to change this value in User Details screen.

Force Passcode (Boolean value)

All Infor mobile apps need to adopt passcode settings. When not managed by MDM, the user can decide whether to protect the app withpasscode.

When Force Passcode is set and a notification is triggered to force the passcode, the user is prompted to create a passcode. The user must set the passcode before closing the window.

After the Force Passcode is set, Erase Data after 10 Failed Attempts is enabled automatically.

Note: The user cannot change this setting manually and the option to turn off the passcode is not displayed.

Minimum Passcode Length (Integer value)

Sets the minimum passcode/PIN length that is required in the Passode/PIN screen used in the app.

Perform Device Check (Boolean value)

Sets whether to perform Rooted or Jailbroken device tests on the app launch for increased security. If set, users cannot log in to the app if the device is rooted or jailborken. This check is done by default and only skipped in case there are issues with the process.