Configure Workspace ONE Content with application configuration values.

You can configure settings for your Workspace ONE Content using the configuration key and configuration value pairs provided by Workspace ONE UEM. Enter these configuration key value pairs either in the custom SDK Profile or the default SDK profile on the Workspace ONE UEM console.

Configure Settings using Default SDK Profile

Add the configuration keys in the default SDK profile to configure the settings for Workspace ONE Content.

  1. Navigate to Group & Settings > All Settings.
  2. From All Settings, navigate to Apps > Settings & Policies > Settings.
  3. Select Enable Custom Settings and paste the configuration keys as per your requirement.
  4. Select Save.

Configure Settings using Custom SDK Profile

  1. Navigate to Group & Settings > All Settings.
  2. From All Settings, navigate to Apps > Settings & Policies > rofiles > Custom Profile > Custom Settings.
  3. If you want to add a custom profile, navigate to Apps > Settings & Policies > Profiles > Add Profile > SDK Profile > iOS or Android > Custom Settings.
  4. From Custom Settings, select Configure and paste the configuration keys as per your requirement.
  5. Select Save.

Privacy Settings for Workspace ONE Content (iOS and Android)

Additional privacy disclosure and data collection practices can be performed by using certain configuration keys in the UEM console.

End users who are upgrading or are starting to use the latest version of Workspace ONE Content are presented with new privacy dialog screen upon the application launch.

The privacy dialog screen lets the user know the following information:

  • Data collected by the app – Provides a summary of data that is collected and processed by the application. Some of this data is visible to administrators of the Workspace ONE UEM administration console.
  • Device Permissions – Provides a summary of device permissions requested for the app to enable product features and functionality, such as push notifications to the device.
  • Company's privacy policy – By default, a message is displayed to the user to contact their employer for more information. You can configure the privacy policy URL in the UEM console. Once configured, the user can access the employer’s privacy policy from the app.

Use the following configuration keys to enable privacy notice and data sharing settings in Workspace ONE Content:

Configuration Key Value Type Supported Values Description
{ "DisplayPrivacyDialog" } Integer 0 = disabled
1 = enabled (default)
When set to '1' (enabled), Workspace ONE Content displays a privacy notice to the users about the data that is collected and the permissions that are required on the device for the optimal functioning of the app.
{ "PolicyAllowFeatureAnalytics" } Integer 0 = disabled
1 = enabled (default)
When set to '1' (enabled), Workspace ONE Content displays a notice to the users about the option to opt-in to anonymous feature usage analytics that help VMware improve product functionality and invent new product capabilities. When set to '0', the data sharing notice is not displayed and no data is collected from the device to optimize the app experience.
{ "PolicyAllowCrashReporting" } Boolean True = enabled False = disabled When set to True, app crashes are reported back to VMware.
{ "PrivacyPolicyLink" } String "https://www.url.com" Provide the Policy URL that you want your users to visit when Your company's privacy policy is selected from the Privacy notice.

Import Restriction in Workspace ONE Content (iOS Only)

You can restrict or allow the import of content from third-party applications into the Workspace ONE Content by using certain configuration keys in UEM console. These configuration keys allow the content import from only the approved list of native applications.

Use the following configuration keys to restrict or allow content import from third-party applications into Workspace ONE Content.

Configuration Key Value Type Supported Values Description
{"ContentImportRestriction"} Boolean true = restriction enabled
false = restriction disabled For example, {"ContentImportRestriction": true}
When enabled, device users cannot import content from any third-party applications that are not in the allowlist including the native iOS applications into the Workspace ONE Content.
{"ContentImportAllowNativeApps"} Boolean true = import from native applications are allowed
false = import from native applications are not allowed For example, {"ContentImportAllowNativeApps": true}
When enabled, the device users can import content from native applications when the import restriction is enabled.

The ContentImportRestriction and ContentImportAllowNativeApps configuration values can be used in combination to configure the import restriction as per your requirement. If you want to allow import of content from all native apps, enable the ContentImportAllowNativeApps key. The ContentImportAllowNativeApps key is enabled by default and allows import from all native apps such as iOS native Email, Files, Safari, AirDrop, and such. When enabled, the device users can open and import content from apps that are not in the allowlist into Workspace ONE Content using the web versions of the non-whitelisted applications (using Safari).

If you want to allow only specific applications, disable the ContentImportAllowNativeApps key and add the allowed applications in the allowlist.

If you want to restrict importing of content from specific native apps, disable the ContentImportAllowNativeApps key and add the allowed native applications in the allowlist.

Note: The Limit Documents to Open Only in Approved Apps option must be enabled in the Data Loss Prevention settings before enabling the configuration key values. Safari and AirDrop cannot be inluded in the allowlist as there is no associated bundle ID.

PDF Autosave in Workspace ONE Content (iOS Only)

From Workspace ONE Content v4.13.2, the device users can enable or disable the PDF Autosave functionality by using the Enable PDF Autosave setting in the Workspace ONE Content app.

The PDF Autosave setting is disabled by default. The PDF Autosave function can be set to 30 seconds, 60 seconds, and 120 seconds respectively using the Autosave time in seconds setting in the Workspace ONE Content. The administrators can use the configuration key provided by Workspace ONE UEM in the Workspace ONE UEM console to force enable the PDF Autosave functionality in Workspace ONE Content. When enabled using the configuration key, the device users cannot disable the PDF Autosave function and the Enable PDF Autosave setting is unavailable in the Workspace ONE Content. When the PDF Autosave function is enabled, the changes made to a PDF file when an autosave is in progress are not saved. After every instance of an autosave, the PDF document is reloaded.

Use the following configuration key to enable PDF Autosave function is Workspace ONE Content:

Configuration Key Value Type Supported Values Description
{ "ContentPDFAutoSaveEnabled" } Boolean true = enabled
false = can be enabled or disabled by the device user
When set to True, the PDF Autosave functionality is enabled and the device users cannot disable the setting. The Enable PDF Autosave setting in the Workspace ONE Content is unavailable to the device users.

Screen Timeout Restriction for Workspace ONE Content (iOS Only)

You can restrict the device users from disabling the screen timeout in Workspace ONE Content app by using certain configuration keys in the Workspace ONE UEM console.

Configuration Keys Value Type Supported Values Description
{ "PolicyAllowScreenTimeoutToggle"} Boolean True (default) = Enabled
False = Disabled
Set to True or False to control the timeout setting in Content app. If a value is not set, the default setting is applied and users can switch the timeout setting.When set to false, users are not allowed to toggle the timeout setting.

Modern Authentication using WKWebView (iOS Only)

For security purpose, you can add a configuration key to prevent modern authentication flows on Safari and allow authentication flows using WKWebView instead of SFSafariViewController. This key, when used, allows Modern Authentication without allowlisting Safari.

Note: Basic authentication is supported for OAuth repositories such as One Drive, Google Drive, Box, Sharepoint O365, and One Drive for Business.

Configuration Key Value Type Supported Values Description
{ "AccountUseWebviewForOauth"} Boolean TRUE = Enabled
FALSE = Disabled (default)
When set to True, the oauth flow is presented using a WKWebView instead of SFSafariViewController.

Auto Sync Control for Repositories (Android Only)

Add a configuration key in the default or the custom SDK profile to control the auto sync and authentication check for repositories that are not of managed content repository type.

Configuration Key Value Type Supported Values Description
{ "AutoSyncEnabled"} Boolean TRUE (default) = Enabled
FALSE = Disabled
When set to False, auto sync and authentication check for repository occurs only when the user navigates into the repository. When the default value is applied, sync and authentication check takes place when an automatic or manual sync is performed.

Screen Record during Remote Support (Android Only)

You might require screenshots or screen records of the user's Content application while assisting the user in troubleshooting any issue during a remote support session. However, if a DLP restriction is set for the application that does not allow screen record, you cannot perform a screen capture.

To override the DLP restriction and allow screen record, add the following configuration key to the default or custom SDK profile on the Workspace ONE UEM console.

Configuration Key Value Type Supported Values Description
{ "AllowScreenRecord"} Boolean TRUE = Enabled
FALSE = Disabled (default)
When set to True, screen record is allowed.
When set to false, screen record is restricted.

Workspace ONE Send Support for Content

By integrating Workspace ONE Send with Workspace ONE Content, you can restrict the files in Workspace ONE Content to open only through Workspace ONE Send. To force open the files through Send app, add a configuration key in the UEM console.

Use the following configuration key to restrict files to open through Workspace ONE Send.

Configuration Key Value Type Supported Values Description
{ "PolicyAllowAIPFilesToOpenInOffice"} Boolean True = Enabled
False = Disabled
When set to True, the files open through Workspace ONE Send.

Staged Content Support for Multi-User Devices

Add a configuration key in the default or custom SDK profile to enable the staged content mode for multi-user devices. By enabling the staged content mode on multi-user devices, you can prevent the loss of content between the device check-in and check-out sessions.

Configuration Key Value Type Supported Types Description
{ "RetainContentBetweenCheckoutSessions": true } Boolean True = Enabled
False (default) = Disabled
When set to true, the downloaded content is retained and not cleared during the device check-in and checkout sessions.
When set to false, the downloaded content is cleared and not retained during the device check-in and checkout sessions.

For more information about the staged content support, see Enable Staged Content Mode for Multi-User Devices.

check-circle-line exclamation-circle-line close-line
Scroll to top icon