Configure how device users authenticate to various components after you configure the app to use the default SDK settings. Components include Workspace ONE UEM applications, applications built using the AirWatch SDK, and wrapped applications.

See Supported Settings and Policies Options for the SDK to find out which default settings the SDK supports. Find the matrix in the Workspace ONE UEM Mobile Application Management Guide. To know what default settings Workspace ONE UEM applications support, see the topics for that specific application.

  1. Navigate to Groups & Settings > All Settings > Apps > Settings and Policies > Security Policies.
  2. Set the Authentication Type and complete settings for the desired authentication method.

    • Passcode

      Passcode Setting Description
      Passcode Enable this option to require a local passcode requirement.
      Authentication Timeout

      Define the time elapsed, ranging from the last successful authentication to the value set here, that triggers the system to prompt for Workspace ONE UEM credentials.

      On newer Android applications, authentication timeout prompts for credentials when the session is inactive for the set time.

      Maximum Number Of Failed Attempts

      Set the maximum times, a user can log in, with an incorrect passcode before the system throws an error.

      Actions depend on the platform.

      • Android – The system performs an enterprise wipe on the device.
      • iOS – The system performs an enterprise wipe on the device.
      Passcode Mode

      Set as Numeric or Alphanumeric.

      Allow Simple Value Set the passcode to allow simple strings. For example, allow strings like 1234 and 1111.
      Minimum Passcode Length Set the minimum number of characters for the passcode.
      Minimum Number Of Complex Characters (if Alphanumeric is selected) Set the minimum number of complex characters for the passcode. For example, allow characters like [], @, and #.
      Maximum Passcode Age (days) Set the number of days the passcode remains valid before you must change it.
      Passcode History Set the number of passcodes the Workspace ONE UEM console stores so that users cannot use recent passcodes.
      Biometric Mode

      Select the system used to authenticate for access.

      • Fingerprint – Require users to access the application with their fingerprints. You must configure a device passcode and fingerprint before using the application.
      • Disabled – Does not require biometric authentication systems to access the application.
    • User Name and Password

      Username and Password Setting Description
      Username and Password Enable this option to set authentication to use the Workspace ONE UEM credentials.*
      Authentication Timeout

      Define the time elapsed, ranging from the last successful authentication to the value set here, that triggers the system to prompt for Workspace ONE UEM credentials.

      On newer Android applications, authentication timeout prompts for credentials when the session is inactive for the set time.

      Maximum Number Of Failed Attempts

      Set the maximum times, a user can log in, with an incorrect passcode before the system throws an error.

      Actions depend on the platform.

      • Android – The system prompts the user for their Workspace ONE UEM credentials.
      • iOS – The system performs an enterprise wipe on the device.
      Biometric Mode

      Select the system used to authenticate for access.

      • Fingerprint – Require users to access the application with their fingerprints. You must configure a device passcode and fingerprint before using the application.
      • Disabled – Does not require biometric authentication systems to access the application.
      *For Workspace ONE UEM Video stand-alone applications, configure Username and Password so that users can log out of the application.
    • Disabled

      Select to require no authentication to access the application.

  3. Save your settings.

For more topics about the SDK and mobile application management, see MAM Functionality With SDK Functions.