View if an SDK capability needs both code and console settings, or just one of the two.

SDK Capability

Add Code (Beyond AWController)

Set in the Console
Force Token For App Authentication No

Yes

Enable

This setting controls how the system allows users to access SDK-built applications, either initially or through a forgot-passcode procedure. When enabled, the system forces the user to generate an application token through the Self-Service Portal (SSP) and does not allow username and password.

Authentication

Yes

Use SDK helper classes.

Yes

  • Enable
  • Set a type
SSO

Yes

Enable keychain sharing.

Yes

Enable

Integrated authentication

Yes

Use the challenge handler.

Yes

  • Enable
  • Enter allowed sites
  • Set an authentication option
App tunnel No

Yes

  • Enable
  • Select a mode

    • Configure the proxy components of the VMware Tunnel.
    • If not using VMware Tunnel, ensure the integration of the selected proxy with your Workspace ONE UEM deployment.
Data loss prevention (DLP)

Yes

  • Set the AWSDKDefault bundle and the AWSDKDefaultSettings.plist.
  • To use the third party keyboards feature, implement the shouldAllowExtensionPointIdentifier API in the UIApplicationDelegate.

 

Yes

  • Enable
  • Set the supported restriction
Analytics

Yes

  • Set the AWDataSampler.
  • Set the AnalyticsHelper.
  • Decide to use the SDK or the AirWatch Agent for telecom data.

Yes

  • Enable
  • Set privacy if setting do not disturb
Branding

Yes

Add values to the AWSDKDefaultSettings.plist.

Yes

  • Enable
  • Set colors
  • Upload images
Sample data and MDM information

Yes

  • Use the beacon.

    The SDK automatically sends the beacon but you can manually send the beacon when desired.

  • Query the DeviceInformationController singleton class.
No
Compromised protection

No

Use code to check the status of devices with the application.

Yes

Enable

Custom settings

Yes

Use the AWCustomPayload object.

Yes

  • Enable
  • Enter code
Geofencing

No

Devices must use location services and have GPS.

Yes

  • Enable
  • Set the area
Logging

Yes

Add APIs for logging. See the sample applications for examples.

Yes

  • Enable
  • Set the level
  • Set wi-fi
Offline access

No

 

Yes

  • Enable
  • Set time allowed to be offline
Encryption

Yes

Use methods in the AWController to encrypt and decrypt data.

No

However, the strength of the encryption is dependent on the authentication method set in the Workspace ONE UEM console.