Workspace ONE UEM can configure your iOS and iPadOS devices to present a single application as the primary interaction for users. The user will only have access to the application, and cannot access the iOS and iPadOS Springboard. This configuration is used to create a kiosk or digital signage using your iOS and iPadOS devices.


This guide assumes you have knowledge of certain work flows in the Workspace ONE UEM console, and have completed certain steps already:

  • Configured integration with Apple Business Manager for Automated Device Enrollment and distribution of volume purchased applications.
  • Smart groups are already created for your iOS and iPadOS devices.
  • Network configuration for Wi-Fi and digital certificates if necessary to connect are configured.
  • The iOS or iPadOS version of the app that will act as the primary interaction for users has been added to the console (either as a Public or a Custom App from the App Store, or as an Enterprise developed application uploaded to the Workspace ONE UEM console). You can think of this app as your kiosk app.
  • Every device enrolled into Workspace ONE UEM needs to be associated to a user account. For Kiosk devices, these user accounts are typically service accounts that are tied to either a location name or another identifier to help identify the device. These users can either be created in Workspace ONE UEN, managed in Active Directory, or third-party cloud identity provider.


Configure Automated Device Enrollment

To configure automated device enrollment in the Workspace ONE UEM console:

  1. Navigate to Groups and Settings > All Settings > Devices & Users > Apple > Device Enrollment Program.
  2. Create an Automated Device Enrollment profile with Authentication ON.
  3. Enable Supervision.
  4. Select Save.
  5. After successful creation, select Edit Assignment to assign the Device Enrollment profile to devices.
  6. Download the template for this batch type.
  7. Add all the serial numbers of the devices that are to be provisioned and used as shared devices.
  8. Import .csv file with the list of Serial Numbers.
  9. Select Save.

Create Single App Mode Configuration Profile

To create single app mode configuration profile:

  1. Navigate to Devices > Profiles & Resources > Profiles > Add > Add Profile > iOS.
  2. In the General Tab, provide a name for the profile and assign the profile to smart groups that include your kiosk devices.
  3. Select the Single App Mode payload, and select Configure.
  4. Select Lock device into a single app.
  5. Type the Bundle ID of the application that the devices need to be locked to.

    Note: By default, all functions on the device will be configured to be disabled. You may choose to enable any particular setting if necessary for your custom needs. Else, proceed to Save and Publish.

  6. Select Save to complete the Launcher configuration.
  7. Select Save and Publish.

Application Update Management

Check-out how to update Enterprise Apps in Single App mode:

check-circle-line exclamation-circle-line close-line
Scroll to top icon