home

Mobile Endpoint Security

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Adding the Android Lookout for Work app to Apps@Work

See this Ivanti Documentation topic ‘Adding Google Play Store app for Android Enterprise’ for Guidance. Choosing the following when prompted:

  • If Ivanti Neurons for MDM is configured for Android Enterprise, pre-approve the app permissions:.
  • For new app permission requests, select Keep approved when app requests new permissions.
  • Review the Category entries and add or remove them as needed,
  • Check Delegate this app to all spaces

Follow the Ivanti documentation for the steps to add the Lookout for Work app from the Google Play store.

  1. On the Add App: Choose screen, click the drop-down and select Google Play, enter Lookout for Work in the search field, then select the app:
  2. If Ivanti Neurons for MDM is configured for Android Enterprise, pre-approve the app permissions:
    1. Click Approve to open the permissions list, then Approve to accept them on behalf of end users:
    2. For new app permission requests, select Keep approved when app requests new permissions, then click Done.
  3. Click Next.
  4. Review the Category entries and modify them if necessary, then click Next.
  5. On the Add App: Delegate screen, check Delegate this app to all spaces, then click Next.
  6. On the Add App: Distribute screen, click Custom.
  7. If you have a MobileIron EMM Gold license or higher, you can create a distribution filter to include any device with the LookoutEnrolled custom attribute:

    If you have already added the iOS app and created a distribution filter, search for LookoutEnrolled in the search box instead of creating a new filter, then continue to Step 9.

    1. Under App Distribution Summary, click + Add Distribution Filter.
    2. Enter the following:
      FieldValue
      Name
      LookoutEnrolled
      ... of the following rules are true:ALL
      1st DropdownCustom Device Attribute
      2nd DropdownLookoutEnrolled
      3rd Dropdownis equal to
      4th Dropdown
      true

      Because the custom LookoutEnrolled attribute is not assigned to any devices yet, the Results section should include 0 Devices.

    3. Click Create Distribution Filter.
    4. Select a test user from the Users list on the Distribute screen, then click Next.
      You cannot leave the distribution settings completely empty, so you must manually add a test user since the LookoutEnrolled attribute is unassigned.
  8. If you have a MobileIron EMM Silver license, select the User Group(s) to include:
    1. Under Select below to distribute this app, click the User Groups tab and check all user groups you wish to include:
    2. Optionally, add individual users from the Users tab.
    3. Click Next.
  9. Create a managed configuration for Android Enterprise devices:
    1. Under App Configurations, locate Managed Configurations for Android and click + to add a new configuration:


    2. Enter a name for the app configuration, and check Blocks app from sharing widget across profiles and Blocks the user from uninstalling the app.
    3. Enter the following case sensitive va;ues:

      FieldValue
      MDM name
      MOBILEIRON
      MDM Device ID
      ${devicePK}
      Android ID(leave blank)
      Identification(leave blank)
      Global Enrollment Code

      Enter the alphanumeric Enrollment Code from the System > Account screen in your Lookout MES Console.

      For example, IOSDMOR:



      Email
      ${userEmailAddress}
      Dual Enrollment
      false
      Device Unique Identifier

      (leave blank)

      This value is used to correlate devices when using an unsupported MDM. It is not used for Ivanti integrations.

      HSM Key value(unchecked)
    4. Click Next.
  10. Click Done.
    The app appears in the App Catalog with a New! badge. You may need to refresh the page to see the updated list.