home

Mobile Endpoint Security

Mobile Endpoint SecuritySecurity Service Edge
Mobile Endpoint SecuritySecurity Service Edge

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Show Contents

Mobile Endpoint Security

Adding Lookout for Work to Apps@Work

Adding the Android Lookout for Work app to Apps@Work with Zero Touch Activation

This procedure adds Android Lookout for Work app to Apps@Work and sets up Zero Touch Activation. For iOS see Setting up Managed App Configuration for Zero Touch Activation on iOS.

  1. In the top navigation tabs, click Apps > App Catalog > Add+:


  2. From the Choose screen, click Google Play:


  3. Search for Lookout for Work and select the app in the results list:


  4. Click Next.
  5. Optionally, add the app to a category in your Apps@Work catalog and click Next.
  6. Optionally, feature the app in your Apps@Work catalog.
  7. Under Android Enterprise (All Modes), check Install this app for Android enterprise.
    This enables additional configuration options. If these fields do not display, confirm that your Ivanti EPMM instance is configured for Android Enterprise.
  8. Set the following:


    FieldValue
    Install this app for Android enterpriseChecked
    Auto Update this AppChecked
    Silent install for Mandatory AppsChecked
    Block Widget on Home ScreenChecked
    Block UninstallChecked
  9. Under Configuration Choices, expand Configuration for Lookout for Work and set the following case sensitive parameters::
    FieldValue
    MDM name 
    IVANTI-EPMM
    MDM Device ID 
    $DEVICE_UUID$
    MDM Connection ID(leave blank)
    Android ID(leave blank)
    Identification(leave blank)
    Global Enrollment Code

    Enter the alphanumeric Enrollment Code from the System > Account screen in your Lookout MES Console.

    For example, IOSDMOR:



    Email 
    $EMAIL$
    Dual Enrollment 
    false
    Device Unique Identifier

    (leave blank)

    This value is used to correlate devices when using an unsupported MDM. It is not used for Ivanti EPMM integrations.

    HSM Key value(unchecked)
  10. Expand Runtime Permissions and set all dropdowns to Always Accept:


  11. Click Save.
  12. Create an always on VPN connection.

    When you enable always-on VPN functionality for zero touch activation using Ivanti EPMM, the Android OS will not permit any other VPN to connect.

    1. In the top navigation tabs, click Policies & Configs, then click Add New > Android > Android enterprise:


    2. Enter the following settings:


      FieldValue
      Name 
      Lookout for Work (Android Enterprise)
      Auto update Mobile@Work app on the devices(Checked).
      Always-on VPN(Checked). This enables the field below.
      App IdentifierLookout for Work
    3. Click Save.

      The policy appears in the Policies & Configs > Configurations list.

  13. Apply the always-on VPN configuration to your Lookout for Work enrollment label:
    1. Click the checkbox for the new policy in the left column of the list, then click Actions > Apply To Label:


    2. Check the Lookout for Work enrollment label.
    3. Click Apply > OK.
  14. Click Finish.

    This returns you to the App Catalog screen so that you can confirm the new app is listed.

  15. In the App Catalog, select the app and click Actions > Apply To Labels:


  16. In the Apply to Labels window, search for Lookout for Work and select it, then click Apply:


    This applies the enrollment label you created in Creating a Label for Enrollment.

Last updated: November 20, 2024

lookout-footer

Legal Privacy Policy Cookie Policy Transparency Report Compliance Info Compliance Info (Gov)

© 2024 Lookout, Inc. LOOKOUT®, the Lookout Shield Design®, LOOKOUT with Shield Design® and the Lookout multi-color/multi-shaded Wingspan Design® are registered trademarks of Lookout, Inc. in the United States and other countries. DAY OF SHECURITY®, LOOKOUT MOBILE SECURITY®, and POWERED BY LOOKOUT® are registered trademarks of Lookout, Inc. in the United States. Lookout, Inc. maintains common law trademark rights in EVERYTHING IS OK, PROTECTED BY LOOKOUT, CIPHERCLOUD, and the 4 Bar Shield Design.