Setting up Managed App Configuration for Zero Touch Activation on iOS

For iOS, Lookout for Work uses a Managed App Configuration file to uniquely identify devices and to push app settings that allow users to enroll using Zero Touch Activation.

NOTE: You can skip these iOS steps if you are installing only the Android version of Lookout for Work.

Create a new text file in a convenient location and paste in the following XML:

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" " http://www.apple.com/DTDs/PropertyList-1.0.dtd ">

<plist version="1.0">
<dict>
<key>MDM</key>
<string>MOBILEIRON</string>
<key>DEVICE_UDID</key>
<string>$DEVICE_UDID$</string>
<key>EMAIL</key>
<string>$EMAIL$</string>
<key>GLOBAL_ENROLLMENT_CODE</key>
<string>REPLACE THIS WITH YOUR GLOBAL ENROLLMENT CODE</string>
<key>ZeroTouchActivation</key>
<string>TRUE</string>
</dict>
</plist>

If you do not want Zero Touch Activation, omit these lines to use 1 click instead:

<key>ZeroTouchActivation</key>
<string>TRUE</string>

Replace the indicated value with your Global Enrollment Code.

Enter the alphanumeric Enrollment Code from the System > Account screen in your Lookout MES Console.

For example, IOSDMOR:

If you are configuring Lookout integrations for multiple tenants (such as for testing and production environments), each tenant uses a different code.
Save the file as lookout_mes_config.xml or .txt.
In the Ivanti EPMM Admin Portal, use the top tabs to navigate to Policies & Configs > Configurations > Add New.
In the cascading menu, select iOS and macOS > iOS Only > Managed App Config:

Enter the following information:


Field	Value
Name	Lookout for Work iOS Config
Description (Optional)	Lookout for Work application configuration
Bundle ID	For the App Store edition of Lookout for Work, this is `com.lookout.work` For the In-House edition of Lookout for Work, this is the Bundle ID chosen when re-signing the Lookout for Work iOS app with the enterprise distribution certificate, for example, `com.lookout.enterprise.<YourCompanyName>`
File	Browse to and select the file you saved in Step 3.

Click Save.

You can confirm the file format by viewing the new configuration file. Select it from the list and click View File Data to verify the XML import.
To assign the new Managed App Configuration to devices, select the policy from the Policies & Configs > Configurations list and click Actions > Apply To Label:
In the Apply To Label window, search for Lookout for Work and select it, then click Apply:

This applies the managed app configuration to devices in the enrollment label you created in Creating a Label for Enrollment.

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Setting up Managed App Configuration for Zero Touch Activation on iOS

lookout-footer