home

Mobile Endpoint Security

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Setting up your Ivanti Neurons for MDM Connector in the Lookout Mobile Endpoint Security Console

Once you have configured Ivanti Neurons for MDM, you can set up a connector in the Lookout MES Console:

  1. Log in to the Lookout MES Console at https://app.lookout.com.
  2. In the left sidebar, click Integrations.
  3. Under Choose a product to set up, click the MobileIron tile.

    Ivanti Neurons for MDM uses the tile with the blue logo.

    The Ivanti Neurons for MDM connector page opens.

  4. Under Connector Settings, enter the following:
    FieldValue
    Label for this MDM Connection(Optional) A user-friendly name for the connector.
    Ivanti Neurons for MDM URL

    Your Ivanti Neurons for MDM cluster, for example: https://na2.mobileiron.com

    If you are unsure of which cluster you are on, log in to Ivanti Neurons for MDM and check the URL in your address bar after you log in.

    UsernameEnter the Username (email) and Password from Creating an API User.
    Password
    Device Space IDEnter the Ivanti N-MDM Device Space ID. If not specified, the Ivanti N-MDM default will be used.
  5. (Optional) To route Lookout traffic through a proxy, enter the proxy address and credentials in the Proxy Settings fields.
  6. Click Create Integration in the top right corner.
    If creation is successful, a banner notification appears and additional sections become enabled.
  7. Scroll down to Enrollment Management and enter the following:

    FieldValue
    Automatically drive Lookout for Work enrollment on Ivanti Neurons for MDM managed devicesON
    Use the following custom attribute to identify devices that should have Lookout for Work app activatedYour enrollment custom attribute. This should be LookoutEnrolled.
    How often should Lookout check for new devices?Lookout recommends using the default 5 minute interval.
    Automatically send activation emails to MobileIron managed devices

    OFF

    For an MDM integration, you should drive enrollment through your MDM, not via Lookout MES Console invitation emails.

    Delete device on unenrollmentON
  8. Scroll down to State Sync and enter the custom attributes you created in Creating Custom Attributes for Enrollment and Device State Sync.
    FieldValue
    DEVICE STATUS: Custom attribute used to convey device activation state
    LookoutActivationState
    CONNECTION STATUS: Custom attribute set when a device is unreachable by Lookout
    LookoutDeviceUnreachable
    CONNECTION STATUS: Custom attribute set when a device is disconnected
    LookoutDeviceDisconnected
    RISK STATUS: Custom attribute used to convey issue state level, if any
    LookoutThreatLevel
    RISK STATUS: Custom attribute used to convey device state
    LookoutDeviceState

    If you choose not to synchronize a specific state to Ivanti Neurons for MDM, leave the corresponding toggle off.

    HERE

  9. Scroll down to Error Management and enter an email address for error reporting.
  10. (Optional) Scroll down to Group Management and enter a Lookout MES Console Device Group for new devices from this connector.

    By default, new devices are added to the Default Group in the Lookout MES Console. For more information about Device Groups, see the Lookout MES Console Administrator's Guide.

  11. Scroll up and click Save Changes in the top right corner.
    You can review connector settings from the Integrations module at any time.