home

Mobile Endpoint Security

Mobile Endpoint SecuritySecurity Service Edge
Mobile Endpoint SecuritySecurity Service Edge

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Show Contents

Mobile Endpoint Security

Deploying Lookout for Work

Pre-Granting Permissions and Configuring Zero-Click Activation for Android Users

In addition to deploying managed app config to Android Enterprise devices, you can pre-grant the required permissions to Lookout so that users only have to open the app in order to activate.

If you want to enable Zero-Click activation, you can deploy a VPN profile from Workspace ONE. The provided App Config and pre-granted permissions enable Lookout to activate without any requiring interaction from the user.

  1. In the left pane of the Workspace ONE UEM Console, navigate to Resources > Profiles & Baselines > Profiles.
  2. Click Add > Add Profile.The Add Profile dialog displays.
  3. Click Android.
  4. On the General screen, enter a Name for the permissions profile.
  5. Scroll to the Permissions section and click to expand, then click ADD.
  6. Select Grant all permissions, then click the Select App field and select Lookout for Work.


  7. Set the dropdown for every permission to Grant.
  8. To configure Zero-Click activation:
    1. Scroll to the Custom Settings section and click to expand , then click ADD.
    2. In the Custom Settings field, paste the following:
      <characteristic uuid="l00k0ut1-5cf7-4fc1-a757-742f3df81a1b" type="com.airwatch.android.androidwork.app:com.lookout.enterprise" target="1"><parm name="profile_name" value="VPN Configuration" type="string" /><parm name="action" value="1" type="string" /><parm name="EnableAlwaysOnVPN" value="True" type="boolean" /><parm name="aw_vpn_uuid" value="leek0ut4-ae9e-4caa-94e3-1b5c32655ced" type="string" /><parm name="vpn_connection_set_active" value="True" type="boolean" /></characteristic>

    This deploys an always-on VPN that configures zero-touch activation on the device.

    The GUID values above can be used across devices without issue.

  9. Click Next.
  10. In the Smart Groups dropdown, select your enrollment Smart Group from Creating Smart Groups & Tags.
    This should be Lookout for Work.
  11. Click Save and Publish.

Last updated: September 30, 2024

lookout-footer

Legal Privacy Policy Cookie Policy Transparency Report Compliance Info Compliance Info (Gov)

© 2024 Lookout, Inc. LOOKOUT®, the Lookout Shield Design®, LOOKOUT with Shield Design® and the Lookout multi-color/multi-shaded Wingspan Design® are registered trademarks of Lookout, Inc. in the United States and other countries. DAY OF SHECURITY®, LOOKOUT MOBILE SECURITY®, and POWERED BY LOOKOUT® are registered trademarks of Lookout, Inc. in the United States. Lookout, Inc. maintains common law trademark rights in EVERYTHING IS OK, PROTECTED BY LOOKOUT, CIPHERCLOUD, and the 4 Bar Shield Design.