Customize your application by adding SDK functions. These functions can require a combination of console settings and code or just one of these components depending if the Workspace ONE UEM system handles capabilities in the backend.
Required Capabilities
You must set application configuration to enable or disable features that pertain to iOS or the Workspace ONE SDK. See Enable SDK Feature Flags for more information.
For a table that briefly identifies what to set, console and application, for your application to use SDK capabilities, see VMware Workspace ONE SDK Capabilities Quick Reference, Code and Console .
Authentication Capabilities
Use authentication types, single sign on, and integrated authentication to design how users access the SDK-built application.
Authentication
Set access to your application with the authentication type function. Use a local passcode, Workspace ONE UEM credentials, or require no authentication. For descriptions of these settings found in the console, see Authentication Type Function Description.
Read how the system allows access to the application when you enable or disable single sign on in Authentication Type and SSO Setting Behaviors.
For information on how to update Active Directory credentials for the Workspace ONE SDK in the application, see Authentication and Changes to Active Directory Passwords.
Single Sign On
Workspace ONE UEM allows access to applications with single sign on enabled in two phases. Workspace ONE UEMchecks the identity of the application user and then it secures access to the application. See SSO Configurations and System Login Behavior for iOS Applications for an explanation.
Read how the system allows access to the application when you enable or disable single sign on in Authentication Type and SSO Setting Behaviors.
Integrated Authentication
Ensure your application development includes the requirements in Requirements for Integrated Authentication so that integrated authentication works.
Review a list of available methods to use for challenges in your integrated authentication module in Integrated Authentication and the Challenge Handler.
Query and Update Capabilities
Use the DeviceInformationController singleton class to query devices for mobile device management (MDM) information. See Query Devices for MDM Information with DeviceInformationController for more information.
The Beacon is a regular update sent from the Workspace ONE SDK for iOS (Swift) to the Workspace ONE UEM console. The SDK sends this data every time it is unlocked. You can also force the beacon when you want data. For information on what data is included in the beacon and how to manually send it, see Beacon Data Sent Upon Application Unlock or Sent Manually.
Data Loss Prevention Capabilities
The data loss prevention (DLP) function to prevent copy and paste actions requires a setting in the Workspace ONE UEM console and added values to the AWSDKDefaultSettings.plist. See Use DLP to Control the Copy and Paste of Data Out and Into Your SDK-Built Application for information.
Configure applications built with the Workspace ONE SDKto open in the VMware Browser and to compose emails in VMware Boxer. See Use DLP to Control Links to Open in VMware Browser and VMware Boxer .
Other SDK Profile Capabilities
The event analytics function requires enabling analytics in the Workspace ONE UEM console and setting up the DataSampler module to report the analytics. For information on where to turn the feature on and off, see Set Up the DataSampler Module for Analytics.
Use the branding function to add logos and primary highlights to your application to customize the look of the application. For more information on the AppLogo and the SplashLogo options, see Use the VMware Workspace ONE SDK for iOS (Swift) Branding Payload to Add Logos and Primary Highlight Colors.
Workspace ONE UEM detects jailbroken devices and can wipe compromised devices if enabled in the Workspace ONE UEM console. Check the compromised status of devices with the information in Check the Compromised Status of Devices with Compromised Protection .
The SDK allows you to define your own custom settings for your application using an SDK profile. See Custom Settings for the SDK.
A geofence limits the use of devices to specific areas including corporate offices, school buildings, and retail department stores. For information on the use of this feature in your application, see Geofence Capabilities.
The logging module enables the discovery of bugs or issues when the application is deployed to users. Read Logging Capabilities for information.
The offline access function allows access to the application when the device is not communicating with the network. It also allows access to Workspace ONE UEM applications that use the SSO feature while the device is offline. See Offline Access for information.
Use basic encrypt and decrypt methods and the SDK's internal encryption keys on raw data. See Encrypt Data on Devices for information.
