The Settings and Policies area in VMware Workspace ONE® UEM powered by AirWatch has settings that control security, application behaviors, and the retrieval of specified data in apps that use the Workspace ONE SDK framework. Assign default or custom SDK profiles that are comprised of the settings depending on your Workspace ONE SDK use. The profile deploys the SDK features to the applicable apps.

Apply these SDK features and settings to the listed applications.
  • Applications built with the Workspace ONE SDK
  • Workspace ONE productivity apps
  • Applications wrapped by the AirWatch App Wrapping engine

Types of SDK Profiles

Workspace ONE UEM has two types of SDK profiles, default and custom. To choose the type of SDK profile, which is comprised of the SDK settings, determine the scope of deployment.

  • Default profiles work well across organization groups, applying to large numbers of devices.

    Find the settings for the default SDK profile in Groups & Settings > All Settings > Apps > Settings and Policies and then select Security Policies, Settings, or SDK App Compliance. You can apply these options across all the Workspace ONE UEM applications in an organization group. Shared options are easier to manage and configure because they are in a single location.

  • Custom profiles work with individual devices or for small numbers of devices with applications that require special mobile application management (MAM) features.
    Find the settings for custom SDK profiles in Groups & Settings > All Settings > Apps > Settings and Policies > Profiles. Custom settings for profiles offer granular control for specific applications and the ability to override default settings. However, they also require separate input and maintenance.
    Note: You cannot assign custom SDK profiles to the Workspace ONE Intelligent Hub. You must assign it the default SDK profile.

Requirements to Use SDK Features

You must complete several tasks to successfully use SDK features with your SDK and productivity apps.
  1. You must configure either the default SDK profile or create a custom SDK profile.
  2. You must assign the profile to your SDK or productivity app.

    Assign the profile when you upload or edit the application to the Workspace ONE UEM console in the Apps section. When you change the default or custom profile, Workspace ONE UEM applies these edits when you select Save. Changes can take a few minutes to push to end-user devices. Users can close and restart Workspace ONE UEM applications to receive updated settings.

    1. Navigate to Resources > Apps > Native > <App Type>.
    2. Add or edit an application.
    3. Select a profile on the SDK tab. You can use the default SDK profile or you can use a custom profile.
      • To use the default SDK profile, select the Android Default Settings @ Global or the iOS Default Settings @ Global from the SDK Profile list.
      • To use a custom default SDK profile, select it from the SDK Profile list.
    4. Make other configurations and then save the application and create assignments for its deployment.
  3. You must assign a default SDK profile to the Workspace ONE Intelligent Hub. You configure the default SDK profile in the console at Groups & Settings > All Settings > Apps > Settings and Policies and then select Security Policies, Settings, or SDK App Compliance. If you do not assign the default SDK profile to the Workspace ONE Intelligent Hub to apply SDK configurations, your SDK configurations in Settings and Policies do not work in applications.
    Note: You cannot use custom SDK profiles with the Workspace ONE Intelligent Hub. The profile you set in Groups & Settings > All Settings > Apps > Settings and Policies > Profiles is a custom SDK profile. It is not the default SDK profile. The Workspace ONE Intelligent Hub only supports the default profile set in either the Security Policies, Settings, or SDK App Compliance sections of Settings and Policies.
    • Workspace ONE Intelligent Hub for iOS
      1. Navigate to Groups & Settings > All Settings > Devices & Users > Apple > Apple iOS > Intelligent Hub Settings.
      2. Set the SDK Profile option to the default profile by selecting iOS Default Settings @ Global.
    • Workspace ONE Intelligent Hub for Android
      1. Navigate to Groups & Settings > All Settings > Devices & Users > Android > Intelligent Hub Settings.
      2. Set the SDK Profile option to the default profile by selecting Android Default Settings @ Global.

What Happens if You Do Not Assign Your SDK or Productivity Apps an SDK Profile?

Workspace ONE UEM assigns profiles at the closest organization group (OG). You can control which profile your apps get (and what SDK functionality the apps use) when you upload and deploy them in the Apps section of the console. Assigning the SDK profile to the app in the Apps section is best.

If you do not assign an SDK profile (default or custom) to your SDK and productivity apps in the Apps section of the console, then Workspace ONE UEM assigns the default SDK profile configured at the OG closest to the device.

Another scenario that influences the SDK features your SDK and productivity apps use occurs if you have the same app at the parent and its child OG. If you do not assign an SDK profile to an app in a child OG that is also in the parent OG, there are various outcomes.
Table 1. Apps Deployed Both at Child and Parent OGs, What SDK Profile Does Your App in the Child OG Receive?
Is the SDK profile (custom or default) set in the Apps section for the Child version of the app? Does the parent version have the SDK profile set in Apps? Result
No Yes Devices that enroll in the child OG receive the app with the parent OG version of the SDK profile set in the Apps section.
No No Devices that enroll in the child OG receive the app with the default SDK profile set at the child OG.

Your SDK App Users and the SDK App Flip Behavior on iOS

When you upgrade to the Workspace ONE SDK v.20.10 for iOS or later, users of your deployed SDK apps that are managed in the Workspace ONE UEM console might notice the iOS apps flipping. The flipping behavior displays as the system fetches the operational data UUID. After the SDK has the operational data UUID, your SDK-app no longer displays this behavior. SDK-apps only flip if they or another app in their cluster do not already have the operational data UUID.