Mobile Iron for iOS Attention: SAP Field Service Management documentation is now available at the SAP Help Portal. On 31 December 2020, docs.coresystems will no longer be available. Until that time, documentation will NOT be updated in docs.coresystems. Note: At this time, Mobile Device Management through Mobile Iron is available ONLY for iOS and Android. In a Nutshell In order to improve security, SAP FSM has implemented Mobile Device Management for Field Service mobile on Android and iOS. This enables accounts to be associated with devices, ensuring that users can not use personal and/or unauthorized devices to access the account. Since the iOS application uses the MobileIron SDK, there are no separate builds. Therefore, the Apple AppStore build works with and without MobileIron. After Mobile Iron has been installed, it can then be configured from the Mobile Iron CORE admin portal. Mobile Iron CORE Admin Portal For setup and configuration of the application access your Mobile Iron CORE admin portal and login using the admin credentials. Note: Please contact SAP for assistance in creating an account. How to Create a New User Account In order to be able to access the Mobile@Work app, a user needs an account on MobileIron platform that should be created by the Admin. The Admin can create a user account using the following steps and the screenshot below. View Steps Login to Mobile Iron CORE admin portal Open "Devices & Users" section Select "Users" Add > Add local user Fill in the form and Click the "Save" button. How to install SAP Field Service Mobile Iron build As stated above, the iOS application uses the MobileIron SDK, therefore we can use the application uploaded to the Apple App Store directly. Because of this, there is no need for an Mobile Iron-only version of the product. View Steps Open the Apple AppStore. Search for "Coresuite Mobile". Install Coresuite Mobile. How to Configure Mobile Iron for iOS View Steps Access admin application https://apps.coresystems.net using admin credentials. Go to https://apps.coresystems.net/admin/clients and add a Client using the Create button, for example we added one with Client Id mdmAuth, Client Secret has to be exactly as the Client ID. Search and select your coresuite account. Choose to edit account and select an option for Clients (OAuth2 API) property. This will be your authentication token which needs to be configured in Mobile Iron as well. Go to Mobile Iron CORE admin portal (https://de.mobileiron.net/coresystems/login.jsp?logout=1) > Policies & Configs, select Coresuite for iOS option from the list. Click Edit on the right side panel and edit the access token to be the same as the one from step 4. IMPORTANT: For "Application", use the identifier listed at the start of the document. Save the changes. How to Add an MDM Access Token Configuration to an App Open Mobile Iron CORE admin portal, go to Policies & Configs section and complete the following steps: View Steps Select the config created for the app (the CORE will create one by default). Configs have the Setting Type "APPCONFIG". Click the Edit button (from top-left corner). Scroll down to App-Specific Configurations and Click the "Add" button. Add the following config: Key: accessToken Value: mdmAuth Click "Save". How to Add Policy for an App This step is important in order to get the application to work. Open Mobile Iron CORE admin portal, go to Policies & Configs section and complete the following steps: View Steps Navigate to Add New > AppConnect > Container Policy. Give it a name (i.e. Coresuite iOS Policy) In the Application field enter the identifier noted at the begining of this document. Click "Save" How to Create Label Labels are generally created by default by Mobile Iron, so if you already have an iOS label, this step is not required. Note: The steps for creating a label are the same as the ones from the Android documentation. Use iOS in the “common.platform” field, instead of Android, and name it accordingly (i.e. iOS). In order to create a label, open Mobile Iron CORE admin portal, navigate to Devices & Users, and complete the following steps: View Steps Tap on Labels tab Click the Add Label button Fill in the form with the name and criteria Click the Save button How to Add the Configuration and Policy to a Label Adding the AppConfig and AppPolicy to a label makes it easy to apply to devices. When a new device is added to the portal, it can be assigned to a label. Everything configured for that label is applied to it automatically. View Steps Open Mobile Iron CORE admin portal, go to Policies & Configs section and complete the following steps: Select both the AppConfig and AppPolicy created or updated in the previous steps. Click "More Actions" and "Apply To Label" Select the iOS label created in the How to create a "label" step Click "Apply"