Apple Event: May 7th at 7 am PT
Is it possible to enroll a device into the OSX server for user profile provisioning via an app that was purchased in the App Store. Ex: User buys app, installs app, thus gets enrolled into the Profile Manager via OSX Server and can then recieve OTA updates of provisioned profiles?
No, of course not. That would allow anyone who wrote an App to take over and totally control every user's device.
If you want OTA updates, write them into your App. Have the App check with your server to make sure it is the latest version and if not refuse to run until the user has updated.
Thanks for the reply. Can I not use osx server as an mdm then? I'm looking to build something sililar to:
OS X Server does indeed have MDM features:
http://www.apple.com/uk/osx/server/features/#profile-manager
https://www.apple.com/uk/support/osxserver/profilemanager/
However, you cannot have an App automatically enroll a device to be managed by a particular server. The user of the device has to make that decision themselves.
Thats actually the way I would want it, so the user upon downloading the app would then have a (disclaimer attached) submit for enrollment, thus tying there device into the MDM. Not an "auto enroll" but by accepting the enrollment via a submit/enter button within the app. Just wanted to confirm that it was possible to have an app in the app store that would be tied to the OSX server / Profile Manager via the users permission.
Might be worth knowing how enrollment works. You can send a file to any Apple device. The file contains the name of the server, and which functions of the device they're giving the server permission to take over. The user then gets to see those details shown in a human-readable way, and then say "Go ahead.".
The configuration file is just a file. You can send it to them via email. You can have them download it from a web site. Or you can have your app create the file and then let them choose to 'open' it. Sounds like your app should do the third.
But personally I would be extremely hesitatant about letting someone else's server mess with my iDevice.
Agreed, but that seems to be the only way to access and thus limit access to the controls/apps that the user of the app would need to limit, and not have the capability to just turn the app off or uninstall it. Kid friendly, parental control. So thanks for the info I have a better plan now. One last thing about enrollment: As you mentioned in the third suggestion having the app create the config file, would it work as such:
The user creates their settings of what to have access to and limit access to, and clicks submit (sending the settings to the MDM), they would in turn recieve the update OTA (config created by MDM to specific settings) to download presumable within the app, such as with an update. Would this then require a reboot, or would it just take effect once the config file is downloaded?
Thanks Again for the feedback!
Is it possible to enroll a user/device via an App Store purchased app?
