As an IT administrator, you can enforce complete control by enrolling the device with Microsoft Intune or another third party service for device enrollment or use Control Hub to configure settings that enforce pin lock or control the data sharing between the users within your organization.

Mobile Device Management (MDM)—For mobile devices owned by the enterprise organization, these devices and all applications are enrolled in and managed by the MDM app.

Mobile Application Management (MAM)—For personally owned mobile devices, Webex Teams is only enrolled in and managed by the MAM app.

The following is the recommended order to use these options:

  1. Microsoft Intune

  2. AppConfig

  3. App Wrapping

  4. Admin Controls in Control Hub

Set Up MDM/MAM using Microsoft Intune

Microsoft Intune integration supports personally owned devices and protects the Webex Teams app with optional device enrollment. For more information, see Microsoft Intune.

  • Microsoft Intune app allows enforcement of app policies such as on-demand VPN, use of work email etc.

  • MDM device enrollment is optional

  • Webex Teams for Microsoft Intune available from App Store /Google Play

  • The Microsoft Intune SDK integration provides more features that those provided by AppConfig and MAMs using wrapped versions of the Webex Teams app.

  • Compliance and conditional Access: Microsoft Intune integrates with Azure AD (identity and access management) to enable a broad set of access control scenarios. For example, you can require mobile devices to be compliant with organization standards defined in Microsoft Intune before accessing the Webex Teams app

  • Microsoft Intune App Protection Policies are rules that ensure an organization's data remains safe or contained in a managed app. A policy can be a rule that is enforced when the user attempts to access or move corporate data, or a set of actions that are prohibited or monitored when the user is inside the app.

1

Navigate to Microsoft Intune.

2

Search through the relevant app store and add the Webex Teams for Microsoft Intune app.

3

Create an app protection policy and setup data protection, access requirements and other restrictions.

4

Push the app to the users.

5

Users will need to request permission before using the app.

6

Administrators can grant access to Microsoft Graph API and MDM through Azure Enterprise Apps or by signing into their app.

Set Up MDM/MAM with AppConfig

AppConfig is a community that defines basic operating system (OS) level MAM control capabilities for iOS and Android. The following is a list of policies supported on both Android and iOS.

iOS

Android

Single Sign-On

Supported

login_hint (string)

Supported

login_hint (string)

Passcode/TouchID

Supported

pinLockDuration (integer)

Supported

pinLockEnabled (bool)

Managed Open-In/Document Sharing

Supported

Supported

Prevent App Backup

Supported

Supported

Disable Screen Capture

Supported

Supported

Enforce App Encryption

Supported

Supported

Remote Wipe

Supported

Supported

Disable Copy and Paste

Supported

copyAndPasteDisabled (bool)

Supported

Use the Android OS setting

App VPN

Supported

Supported

Require FedRamp Cluster Login

Supported

fedRampEnabled (bool)

Supported

Require FedRamp Cluster Login

Android

To manage the Android app, it must be installed in a Work Profile. This requires Android 5.0 or later and requires that AppConfig data contains the following:

“orgIdentifier” = “<Organization_ID>”

Your organization ID is available in Control Hub, select Management: Account.

iOS

Information coming soon

App Wrapping with IPA and AAB

Wrapped versions of the Webex Teams apps, the IPA file for iOS and the AAB file for Android, are available using the Webex Mobile App Management program. For more information, see Mobile Application Management Program. The AAB file for Android contains the APK file.

  • Wrapped application files allow the MAM application to control how an application can be used on a mobile device. The wrapping process provides an additional set of libraries that the MAM application uses to control the wrapped app.

  • We provide the IPA and AAB versions of Webex Teams.

  • The MAM manageable versions of Webex Teams must be enrolled and authorized by the MAM application.

  • Users must download the wrapped and MAM managed version of Webex Teams from the Enterprise’s own app store or MAM app repository.

  • Using MAM controlled wrapped versions of Webex Teams can provide additional controls to those provided through AppConfig.

Admin Controls for Mobile Management

If you choose not to use the Microsoft Intune, AppConfig or App wrapping options, then the following are the admin controls that are available in Control Hub for administrators: