To retrieve the data on the sToken, Workspace ONE UEM syncs with Apple Web services, and then it can display content for assignment and deployment. Workspace ONE UEM distributes licenses by smart group and publishes content when you save an assignment rule in the flexible deployment feature.

The Enable Device Assignment option displays for applications that are eligible for distribution by device serial number. For information about the device-based distribution method, see Managed Distribution by Device Serial Number .

For information on flexible deployment and how to prioritize assignment rules, see Flexible Deployment for Applications Setting Descriptions.

Assign Content to Groups and Publish with Flexible Deployment

Assign content acquired from Apple's Volume Purchase Program (VPP) with managed distribution codes to smart groups.

  1. Navigate to Apps & Books > Applications > Native > Purchased
  2. Select the application and optionally hold licenses and apply an SDK profile.

    Setting Description
    Licenses on hold Enter the number of licenses that you want to place on hold. Use this setting to save the managed distribution codes for later use. You do not have to enter a value.
    SDK Profile If you use AirWatch SDK functionality, assign an SDK profile to the application.
  3. Select Save & Assign to move to the flexible deployment section. You add assignment rules that you can prioritize.
  4. On the Assignments tab, select Add Assignment and complete the options.

    Setting Description
    Add Assignment By

    Select License Codes By Smart Group and assign managed distribution codes.

    Allocate codes to a smart group by typing the name of the group. Options display, and you can select the appropriate smart group from the list. If necessary, you can create a new smart group.

    • Users or Devices – View the number of users for the order.
    • Allocated – Enter the number of licenses to allocate to the selected users. Do no exceed the total number in the order.
    • Redeemed – View the number of licenses that have already been redeemed, if any.
    Assignment Type
    • On Demand – Deploys content to a catalog or other deployment agent and lets the device user decide if and when to install the content.

      This option is the best choice for content that is not critical to the organization. Allowing users to download the content when they want helps conserve bandwidth and limits unnecessary traffic.

    • Automatic – Deploys content to a catalog or other deployment agent on a device upon enrollment. After the device enrolls, the system prompts users to install the content on their devices.

      This option is the best choice for content that is critical to your organization and its mobile users.

    If the Assignment Type is set to Auto when you Publish, Workspace ONE UEM sends an invitation to Apple iOS 7.0.3+ and macOS 10.9+ devices. The invitation enables users to register with Apple's VPP.

    Remove On Unenroll

    Set the application to be removed from a device when the device unenrolls from Workspace ONE UEM. Workspace ONE UEM enables this option by default.

    If you choose to enable this option, supervised devices are restricted from silent app installation because the device is locked and the provisioning profile installation is in the command queue which requires a device to be unlocked to complete the installation.

    If you choose to disable this option, provisioning profiles are not pushed along with the installed application. That is, if the provisioning profile is updated, the new provisioning profile is not automatically deployed to devices. In such cases, a new version of the application with the new provisioning profile is required.

    Prevent Application Backup Disallow backing up the application data to iCloud. However, the application can still back up to iCloud.

    Make App MDM Managed if User Installed

    Apple iOS

    Assume management of applications previously installed by users on their devices, whether applications are supervised or unsupervised.

    Enable this feature so that users do not have to delete the app version installed on the device. Workspace ONE UEM manages the app without having to install the AirWatch Catalog version on the device.

    Use VPN

    Configure a VPN at the application level, and select the Per-App VPN Profile.

    Users access the application using a VPN, which helps ensure that application access and use is trusted and secure.

    Send Application Configuration

    Send application configurations to devices.

  5. Select Save.
  6. If you have more than one assignment rule, use the Move Up and Move Down options to order assignments. Place critical assignments at the top of the list. This configuration displays as the Priority.

  7. Select Save & Publish.

Application configurations are vendor-specific key-value pairs you can deploy with an application to preconfigure the application for users. For resources about application configurations, see Application Configuration Information.