Samsung Knox supports the deployment of internal and public applications.

Internal apps are company-specific apps developed by your organization that you may not necessarily want to be searchable in the public app store, but you want your users to have access to this application from their device. Use AirWatch to distribute, track, and manage your internal applications. For more information on deploying internal apps for inside the Knox container, see Internal Applications Overview.

In order to deploy and manage public apps from Google Play inside the Knox Container, Android for Work and the Google Play Store needs to be enabled through the AirWatch Console. Play for Work applications are configured inside the Knox container after the device is enrolled, the Knox container is created, and Android for Work is configured in the console. Play for Work public apps that are configured in the console will be pushed through Play for Work. In cases where the device is already enrolled, the Agent will check on-demand for an Android for Work token, which will be used to configure Play for Work.