Workspace ONE UEM can configure your iOS and iPadOS devices to present a single application as the primary interaction for users. The user will only have access to the application, and cannot access the iOS, iPadOS, or iPadOS Springboard. This configuration is used to create a kiosk or digital signage using your iOS, iPadOS, and iPadOS devices.
This guide assumes you have knowledge of certain work flows in the Workspace ONE UEM console, and have completed certain steps already:
Configured integration with Apple Business Manager for Automated Device Enrollment and distribution of volume purchased applications.
Smart groups are already created for your iOS, iPadOS, and iPadOS devices.
Network configuration for Wi-Fi and digital certificates if necessary to connect are configured.
The iOS or iPadOS version of the app that will act as the primary interaction for users has been added to the console (either as a Public or a Custom App from the App Store, or as an Enterprise developed application uploaded to the Workspace ONE UEM console). You can think of this app as your kiosk app.
Every device enrolled into Workspace ONE UEM needs to be associated to a user account. For Kiosk devices, these user accounts are typically service accounts that are tied to either a location name or another identifier to help identify the device. These users can either be created in Workspace ONE UEN, managed in Active Directory, or third-party cloud identity provider.
Configure Automated Device Enrollment
To configure automated device enrollment in the Workspace ONE UEM console:
Navigate to Groups and Settings > All Settings > Devices & Users > Apple > Device Enrollment Program.
Create an Automated Device Enrollment profile with Authentication ON.
After successful creation, click Edit Assignment to assign the Device Enrollment profile to devices.
Download the template for this batch type.
Add all the serial numbers of the devices that are to be provisioned and used as shared devices.