Setting up your Ivanti Neurons for MDM Connector in the Lookout Mobile Endpoint Security Console
Once you have configured Ivanti Neurons for MDM, you can set up a connector in the Lookout MES Console:
- Log in to the Lookout MES Console at https://app.lookout.com.
- In the left sidebar, click Integrations.
- Under Choose a product to set up, click the MobileIron tile.
Ivanti Neurons for MDM uses the tile with the blue logo.
The Ivanti Neurons for MDM connector page opens.
- Under Connector Settings, enter the following:
Field Value Label for this MDM Connection (Optional) A user-friendly name for the connector. Ivanti Neurons for MDM URL Your Ivanti Neurons for MDM cluster, for example:
https://na2.mobileiron.com
If you are unsure of which cluster you are on, log in to Ivanti Neurons for MDM and check the URL in your address bar after you log in.
Username Enter the Username (email) and Password from Creating an API User. Password Device Space ID Enter the Ivanti N-MDM Device Space ID. If not specified, the Ivanti N-MDM default will be used. - (Optional) To route Lookout traffic through a proxy, enter the proxy address and credentials in the Proxy Settings fields.
- Click Create Integration in the top right corner.If creation is successful, a banner notification appears and additional sections become enabled.
- Scroll down to Enrollment Management and enter the following:
Field Value Automatically drive Lookout for Work enrollment on Ivanti Neurons for MDM managed devices ON Use the following custom attribute to identify devices that should have Lookout for Work app activated Your enrollment custom attribute. This should be LookoutEnrolled
.How often should Lookout check for new devices? Lookout recommends using the default 5 minute interval. Automatically send activation emails to MobileIron managed devices OFF
For an MDM integration, you should drive enrollment through your MDM, not via Lookout MES Console invitation emails.
Delete device on unenrollment ON - Scroll down to State Sync and enter the custom attributes you created in Creating Custom Attributes for Enrollment and Device State Sync.
Field Value DEVICE STATUS: Custom attribute used to convey device activation state LookoutActivationState
CONNECTION STATUS: Custom attribute set when a device is unreachable by Lookout LookoutDeviceUnreachable
CONNECTION STATUS: Custom attribute set when a device is disconnected LookoutDeviceDisconnected
RISK STATUS: Custom attribute used to convey issue state level, if any LookoutThreatLevel
RISK STATUS: Custom attribute used to convey device state LookoutDeviceState
If you choose not to synchronize a specific state to Ivanti Neurons for MDM, leave the corresponding toggle off.
HERE
- Scroll down to Error Management and enter an email address for error reporting.
- (Optional) Scroll down to Group Management and enter a Lookout MES Console Device Group for new devices from this connector.
By default, new devices are added to the Default Group in the Lookout MES Console. For more information about Device Groups, see the Lookout MES Console Administrator's Guide.
- Scroll up and click Save Changes in the top right corner.You can review connector settings from the Integrations module at any time.