| Feature | Description |
|---|
| User management | Administrators can manage users together with their assigned roles and policies. Administrators can connect to the existing enterprise user stores, which will enable them to provide access to the existing user bases. |
| Device provisioning | iOS and Android powered devices are enrolled to the EMM server using this process. This is an automated process that takes place in the backend. |
| Device configuration | Administrators can use this feature to perform the following operations on iOS and Android devices, which are registered with EMM: - Device lock
Administrators can lock devices via the EMM server.
- Clear pass-codepasscode
Administrators can clear the pass-code assigned to devices via the EMM server.
- Wifi
Administrators can directly set device Wifi settings via the EMM server.
- Camera
Administrators can enable or disable the camera on devices via the EMM server.
- Password policy
Administrators can set a pass-code policy with specific criteria (i.e., the minimum length, number of special characters needed, and more) for devices via the EMM server.
- User password protected Wipe
Users and administrators can delete all the data on their own device via the EMM server, provided they have correctly entered the PIN code that was set during provisioning.
- Send message
Administrators can send a message from the EMM server to devices.
- Encrypt storage
Administrators can enable data encryption to take place when a device is being locked. This is a mobile OS level feature.
- Mute
Administrators can mute devices via the EMM server.
- Change pass-codepasscode
Administrators can change the pass-code of a device via the EMM server.
- APN
Administrators can push APN configurations to mobile devices via the EMM server.
- Email
Administrators can push email configurations to mobile devices via the EMM server.
- Calendar
Administrators can push Google calendar configurations to mobile devices via the EMM server.
- LDAP
Administrators can push LDAP configurations to mobile devices via the EMM server.
- Enterprise Wipe
Administrators can delete enterprise data on devices via the EMM server. If required, WSO2 can integrate EMM with the NitroDesk email clientunregistered devices from EMM. If NitroDesk email client is used, then the email container and settings will also be removed.
- Information accessibility
Administrators can access the following device information via the EMM server:
- Battery information
- Memory information
- Application information
- Operator information
- Root detection
- Location
For more information, see Feature Categorization for Device Configuration. |
| Policy management | Administrators can assign policies with various criteria (e.g., lock password, length of the password, blacklisted applications, applications that need to be installed when the policy is enforced, and more) to users, roles and platforms. Currently, WSO2 EMM only supports Android app blacklisting. |
| Compliance monitoring | EMM will automatically carry out the compliance monitoring process to identify devices that are non-compliant with the policy. |
| Bulk push apps | Administrators can install a particular application to a specific user or a group of users via the EMM server. |
| Tracking app installation | Administrators can get a comprehensive view of all the apps on EMM. While, also being able to filter the app list based on criteria such as, users, roles, installed and uninstalled. |
| Mobile app management | Users who have the Publisher role permission can carry out the following tasks to manage their mobile apps via the WSO2 EMM Publisher: - Upload a new mobile app and submit it to be reviewed.
- View details of a mobile app.
- Publish an approved mobile app.
- Unpublish a published mobile app.
- Publish an unpublished mobile app.
- Retire an unpublished mobile app.
- Deprecate a published mobile app.
- Retire a deprecated mobile app.
|
| Mobile app reviewing | Users who have the Reviewer role permission can carry out the following tasks via the WSO2 EMM Publisher: - Accept a mobile app that has been submitted for review.
- Reject a mobile app that has been submitted for review.
|
| Store Access | Users will be able to use WSO2 EMM Store to install apps of their choice to their own preferred mobile devices. While, also being able to bookmark apps. All bookmarked apps will appear in the My Apps page in the EMM Store. |
| App rating | Users can add and remove app ratings via the WSO2 EMM Store. |
| Single Sign-on (SSO) | EMM supports SSO between all WSO2 EMM Consoles: EMM Console, Publisher and Store. Thereby, when users sign into one console, they will be able to bypass the sign in process when accessing other WSO2 EMM Consoles. |
| Scalability | Clustered deployment for high availability and scalability. |