MobileIron AppStation 1.1.1 for iOS
Guide for Administrators
September 16, 2019
For complete product documentation see:
MobileIron AppStation Product Documentation

Proprietary and Confidential | Do Not DistributeCopyright © 2019 MobileIron, Inc. All Rights Reserved.
Any reproduction or redistribution of part or all of these materials is strictly prohibited. Information in this publication
is subject to change without notice. MobileIron, Inc. does not warrant the use of this publication. For some phone
images, a third-party database and image library, Copyright © 2007-2009 Aeleeta's Art and Design Studio, is used.
This database and image library cannot be distributed separate from the MobileIron product.
“MobileIron,” the MobileIron logos and other trade names, trademarks or service marks of MobileIron, Inc.
appearing in this documentation are the property of MobileIron, Inc. This documentation contains additional trade
names, trademarks and service marks of others, which are the property of their respective owners. We do notintend our use or display of other companies’ trade names, trademarks or service marks to imply a relationshipwith, or endorsement or sponsorship of us by, these other companies.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 2

Contents

ContentsContents

3About MobileIron AppStation

4

MobileIron AppStation overview

4

MAM-only use cases with MobileIron AppStation

4

AppConnect apps for iOS behavior with MobileIron AppStation

5

MAM-only deployment diagrams

5

MAM-only with AppStation

5

MAM-only with AppStation and MDM with other platform

6

MobileIron AppStation configuration

7

Supported configurations for managing apps through AppStation

7

Supported apps with AppStation

7

Administrator actions supported for AppStation

8

Setting up MobileIron AppStation

9

AppStation configuration steps overview

9

Configuring MAM-only in MobileIron Cloud9

Add apps for distribution

10

Custom URL for an app

10

Configuring AppStation sites

11

Verify the setup for AppStation

11

What users see in MobileIron AppStation for iOS

12

Download and install AppStation for iOS

12Register AppStation with MobileIron Cloud

12

AppStation Launcher and Catalog

12

AppStation settings

15

Troubleshooting

15

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 3

1
About MobileIron AppStation
The following provides an overview of MobileIron AppStation for iOS:
lllll

MobileIron AppStation overview
MAM-only use cases with MobileIron AppStation
AppConnect apps for iOS behavior with MobileIron AppStationMAM-only deployment diagrams
MobileIron AppStation configuration

MobileIron AppStation overview
MobileIron AppStation is specifically designed as the MobileIron Unified Endpoint Management (UEM) client for a
MAM-only deployment with MobileIron Cloud.
Deploying a MobileIron Unified Endpoint Management (UEM) platform allows you to secure and manage mobiledevices as well as mobile apps in your enterprise. The term mobile device management (MDM) is used to describe
the features, policies, and configuration used for securing and managing mobile devices. The term mobile appsmanagement (MAM) is used to describe the features, configuration, and policies used for securing, managing anddistributing enterprise apps to mobile devices. In most cases, you deploy MobileIron UEM to do both MDM andMAM. However, in some cases, you may want to manage apps without having to manage the device itself. A
deployment through which only apps on a device are managed is called MAM-only.
In a MobileIron AppStation MAM-only deployment, the MobileIron UEM platform, MobileIron Cloud, supports
installing and managing apps using MobileIron AppStation. Only apps available through AppStation are managed.
The device itself is not managed.

MAM-only use cases with MobileIron AppStation
The following MAM-only use cases are supported with an AppStation deployment:ll

You have contractors who need your relevant apps, but their devices are managed. The device may be
managed by MobileIron Core or another MDM provider.
You have employees or seasonal workers who need your relevant apps on their personal devices, but yourprivacy or legal requirements do not allow device management.

NOTE: If you already have a MAM-only deployment using MobileIron Go, you can continue with thedeployment. However, MobileIron recommends using MobileIron AppStation for new MAM-only
deployments. AppStation supports additional use cases that are not supported with MAM-onlyusing MobileIron Go.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 4

AppConnect apps for iOS behavior with MobileIron AppStation

AppConnect apps for iOS behavior with MobileIron AppStation
The following describes the behavior of AppConnect apps for iOS if the device has both MobileIron Mobile@Workfor device management (MDM) as well MobileIron AppStation for app management (MAM-only):llll

The apps that are AppConnect-enabled with a supported AppConnect version, switch to AppStation. If
AppStation has the appropriate configurations from MobileIron Cloud, the apps continue to work withAppStation. If AppStation does not have the appropriate configurations from Cloud, control for the apps
switches to MobileIron Go. The process is repeated if the app is uninstalled and re-installed.
AppConnect apps that are AppConnect-enabled with a version not supported by AppStation, always switch
to Mobile@Work.
AppConnect apps that have already checked in with either Mobile@Work or AppStation continue to workwith the original client with which the app checked in, even after a new client (Mobile@Work or AppStation)is added. The AppConnect app does not switch to the new client.
If the device has only AppStation, and the AppConnect apps are not enabled with AppConnect 4.3 or later,as supported by MobileIron, the apps run in non-AppConnect mode because they do not have a compatible
UEM client to switch to.

AppStation supports AppConnect apps that are enabled with AppConnect 4.3 or later as supported by MobileIron.

MAM-only deployment diagrams
The following provide a visual representation for a MAM-only deployment with MobileIron AppStation:ll

MAM-only with AppStation
MAM-only with AppStation and MDM with other platform

MAM-only with AppStation
The following shows a MAM-only with AppStation deployment. MobileIron Cloud is set up for MAM-only. Thedevice is not managed, only apps on the device deployed through AppStation are managed.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 5

MAM-only with AppStation and MDM with other platform

FIGURE 1. MAM-ONLY DEPLOYMENT

MAM-only with AppStation and MDM with other platform
The following shows a device on which apps are managed with AppStation, while the device is also managed withanother MDM platform.

FIGURE 2. MAM-ONLY AND OTHER MDM ON A DEVICE

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 6

MobileIron AppStation configurationllDevice A is managed (MDM) by MobileIron Cloud.
Device B is not managed by your tenant of MobileIron Cloud. MobileIron AppStation is used for MAM-only.
The device can also be managed by MobileIron Core or another MDM provider .
NOTE: MobileIron Go and MobileIron AppStation on the same device is not supported.

MobileIron AppStation configuration
Configurations for MAM-only with MobileIron AppStation are created in MobileIron Cloud. MobileIron AppStation
receives the configurations when it registers with MobileIron Cloud.
Use the MAM Only configuration in MobileIron Cloud to set up AppStation. For an overview of the configurations
needed to set up AppStation see AppStation configuration steps overview.
lll

Supported configurations for managing apps through AppStation
Supported apps with AppStation
Administrator actions supported for AppStation

Supported configurations for managing apps through AppStation
In addition, the following configurations in Cloud are supported for managing apps through AppStation:llllllll

Certificate
Identity Certificate
AppConnect configurations and policies
AppTunnel (related to AppConnect)
MobileIron Threat Defense
PrivacyVPN
Wifi

IMPORTANT: MDM-related configurations other than the ones listed are not supported for MAM-onlydevices.
For information on setting up the configurations, see the MobileIron Cloud Administrator Guide.

Supported apps with AppStation
AppStation supports only apps that can be launched using a custom URL scheme. The following types of apps aresupported:lll

AppConnect apps (in-house or from the Apple App Store)
Non-AppConnect apps (in-house or from the Apple App Store)
Web applications

However, MobileIron recommends distributing only AppConnect-enabled apps to MAM-only devices using
AppStation. This is to avoid any conflicts arising from distributing apps which may already be available on theuser's device. These apps may not be able to launch or connect to the servers as expected. For example, if theMobileIron AppStation 1.1.1 for iOS Guide for Administrators| 7

Administrator actions supported for AppStation

device already has the Outlook app, and you distribute Outlook through AppStation, the app will not display on
AppStation Launcher. In this case Outlook will continue to connect to the original server.

Administrator actions supported for AppStation
The following administrator actions through AppStation are supported:lllForce check inRetire
Send messages

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 82Setting up MobileIron AppStation
The following describe the setup required for MobileIron AppStation for iOS:
lllll

AppStation configuration steps overview
Configuring MAM-only in MobileIron Cloud
Add apps for distribution
Configuring AppStation sites
Verify the setup for AppStation

AppStation configuration steps overview
The configurations for AppStation are done in MobileIron Cloud. The following steps provide an overview of theconfiguration steps for deploying AppStation and pointers to the relevant content in the MobileIron Cloud
Administrator Guide:
1. Create a user group to distribute AppStation and manually add users to the group.
See "Creating a manually managed user group" in the MobileIron Cloud Administrator Guide.
2. Create a dynamically managed device group with the rule "user group," which equals to the user group
created for AppStation.
See "Adding a device group" in the MobileIron Cloud Administrator Guide.
3. Create a MAM Only configuration for AppStation and assign it to the dynamically managed device group
created for AppStation.
See Configuring MAM-only in MobileIron Cloud .
4. (Optional) Define the AppStation sites to distribute to devices. AppStation sites are sites that you want tobookmark.
See Configuring AppStation sites for information about AppStation sites.
5. Add apps for distribution and assign the apps for distribution to the dynamically managed device group
created for AppStation.
See Add apps for distribution.
6. Download and register AppStation.
If Always require client registration is enabled in Users > User Settings > Device Registration
Setting in MobileIron Cloud, users automatically get emails for registering their device via AppStation.
Device users download AppStation to their device directly from the Apple App Store.
See What users see in MobileIron AppStation for iOS for information about how device users can register
their devices to your MobileIron Cloud instance and install apps from AppStation.

Configuring MAM-only in MobileIron Cloud
The MAM Only configuration in MobileIron Cloud allows you set up MAM-only for mobile devices.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 9

Add apps for distribution

Before you begin
1. Create a user group to distribute AppStation and manually add users to the group.
See "Creating a manually managed user group" in the MobileIron Cloud Administrator Guide.
NOTE: If devices had been previously enrolled for MDM in a Cloud tenant, users will not be able toregister with the same Cloud tenant using AppStation. To use AppStation, delete thedevices from the Cloud tenant, then register with the same Cloud tenant usingAppStation.
2. Create a dynamically managed device group with the rule "user group," which equals to the user group
created for AppStation.
See "Adding a device group" in the MobileIron Cloud Administrator GuideProcedure
1.
2.
3.
4.

In MobileIron Cloud, go to Configuration > +Add.
Enter MAM only in the search box, then select the MAM Only configuration from the search results.
Enter a name for the configuration.
(iOS only) For Allow Configuration Profiles, select the checkbox to allow installation of the supported
configurations for AppStation.
5. Click Next.
6. Select a distribution option for AppStation.
7. Click Done.
Related topics
MobileIron AppStation configuration

Add apps for distribution
You distribute apps to MAM-only devices through MobileIron Cloud. Do the following in MobileIron Cloud:1. Add the apps that you want to distribute to MAM-only devices.
2. Assign the apps for distribution to the dynamically managed devices group created for AppStation.
NOTE: AppConnect apps require additional AppConnect-related configurations as well.
See the MobileIron Cloud Administrator Guide for adding and configuring apps in MobileIron Cloud. Some relevant
sections are: "Adding an app from a public store," "Adding an In-house app," "Configuring AppConnect Devices,""Configuring AppConnect Apps."
IMPORTANT: When adding apps that are not AppConnect apps to the AppCatalog, ensure that thelaunch URL field is configured. Enter the custom URL for launching the app in the Launch
URL field. This is not required for AppConnect apps. See also Custom URL for an app.

Custom URL for an app
An app's custom URL allows you to launch the app from AppStation. You configure the custom URL in the Launch
URL field when you add the app in MobileIron Cloud for distribution. Since it's not trivial to identify the custom URL
from the app itself, MobileIron recommends checking directly with the developer or doing an Internet search to findthe launch URL.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 10Configuring AppStation sites

For ease of deployment, the custom URL for MobileIron apps and the following common apps is built in toAppStation:llllllllll

DropboxBox
Microsoft ExceMicrosoft Outlook
Microsoft Word
Microsoft Powerpoint
Microsoft Whiteboard
Microsoft Sharepoint
Microsoft OneNote
Microsoft SkyDrive

You do not need to configure a custom launch URL for AppConnect apps.

Configuring AppStation sites
AppStation sites are essentially bookmarks for relevant websites that you want to make available to your users.
Procedure
1.
2.
3.
4.
5.

In MobileIron Cloud, go to Configurations > +Add.
Search for AppStation Sites.
Select the configuration tile to start a new configuration.
Enter a name for the configuration.
In the Configuration Setup section, enter the following for each bookmark:a. Name: Enter a name for the bookmark.
b. URL: Enter the complete URL with prefix for the website.
6. Click Next.
7. Select the dynamically managed device group you created for AppStation.
8. Click Done.
Related topics
ll

MobileIron AppStation configuration
AppStation configuration steps overview

Verify the setup for AppStation
In MobileIron Cloud, go to Devices > Device Groups. Select the device group for AppStation to verify the configurations assigned to the group.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 113
What users see in MobileIron AppStation foriOSThe following provide information about the user experience with MobileIron AppStation:lll

Download and install AppStation for iOS
Register AppStation with MobileIron Cloud
AppStation Launcher and Catalog

Download and install AppStation for iOS
MobileIron AppStation is available in the Apple App Store. Search for MobileIron AppStation in the App Store andfollow the prompts to install the app on your device.

Register AppStation with MobileIron Cloud
When you first launch MobileIron AppStation, you are prompted to enter your username and password. Enter yourenterprise username and password to register with MobileIron Cloud. When you register with MobileIron Cloud theapp Catalog and Sites configured for AppStation becomes available on your device.

AppStation Launcher and Catalog
When you launch MobileIron AppStation you see the Launcher screen. The Launcher screen displays the appsthat you have installed. When you first launch AppStation, the Launcher screen is empty.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 12

AppStation Launcher and Catalog

FIGURE 3. LAUNCHER WHEN APPSTATION IS FIRST LAUNCHEDTap Catalog to see the apps available to you.

FIGURE 4. CATALOG WITH AVAILABLE APPS

TIP: Swipe down to refresh the Catalog screen. Alternately, go to Settings > Check for Updates tomanually sync with MobileIron Cloud and get the latest updates.
Tap an app and follow the prompts to install the app. If the app is a public app, AppStation switches to the AppleApp Store to install the app. After installing the app, launch the app. After installing in-house apps, the togglechanges from Install to Open. Click Open to launch the in-house app.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 13

AppStation Launcher and Catalog

FIGURE 5. IN-HOUSE APP > INSTALL > OPEN>>>>>
The app authorizes through AppStation. The app now also displays in Launcher. You can now launch the app fromLauncher.

If AppStation Sites is configured, Launcher displays two tabs, one for Apps and another for Sites. The Sites tab
contains the website bookmarks configured in Cloud.
If Mobile Thread Defense (MTD) is configured, the MTD icon is seen in Launcher and Catalog.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 14

AppStation settings

FIGURE 6. SITES TAB AND THE MTD ICONAppStation settings
Settings in the AppStation app provides additional information about the app, the AppConnect apps installed on thedevice, access to app logs.

FIGURE 7. SETTINGS

Troubleshooting
The following troubleshooting options are available in AppStation in Settings:l

AppStation captures error level logs by default. Users can send AppStation logs to their administrators fromAppStation by tapping Settings > Send AppStation Logs.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 15

Troubleshootingll

If Mobile Threat Defense (MTD) is configured and applied to the AppStation device group, MTD details areavailable by tapping Settings > MTD Diagnostics.
If Enhanced Logging is enabled, AppStation captures debug level logs. The logs are encrypted andavailable as a .pc7 file. If MTD is configured, additional device logs for MTD are also provided.

MobileIron AppStation 1.1.1 for iOS Guide for Administrators| 16