What's new

• Third-party notices

• Deprecation

System requirements

• Endpoint Management compatibility

• Supported device operating systems

• Language support

• FIPS 140-2 compliance

Onboarding and resource setup

• Scale and size considerations for Cloud Connectors

Certificates and authentication

• Upload, update, and renew certificates

• Citrix Gateway and Endpoint Management

• Domain or domain plus security token authentication

• Client certificate or certificate plus domain authentication

• PKI entities

• Credential providers

• APNs certificates

• SAML for single sign-on with Citrix Files

• Authentication with Azure Active Directory through Citrix Cloud™

• Authentication with Azure Active Directory Group-Based Administration

• Authentication with Azure Active Directory through Citrix Gateway for MAM enrollment

• Authentication with Okta through Citrix Cloud

• Authentication with Okta through Citrix Gateway for MAM enrollment

• Authentication with an on-premises Citrix Gateway through Citrix Cloud

• nFactor authentication

User accounts, roles, and enrollment

• Enrollment profiles

• Notifications

• Configure roles with RBAC

• Licenses

Device management

• Alexa for Business

• Android

  • Migrate from device administration to Android Enterprise

  • Android Enterprise

  • Distribute Android Enterprise apps

  • Legacy Android Enterprise for Google Workspace (formerly G Suite) customers

  • Android OS

  • Control Android device connections by using Firebase Cloud Messaging

  • Support managed configurations feedback (Technical Preview)

  • Android SafetyNet

  • Play Integrity API

  • Samsung

  • Network Access Control

• Apple

  • iOS

  • macOS

  • Deploy devices through the Apple Deployment Programs

  • Enroll Apple devices in bulk

  • Integrate with Apple Education features

  • Shared iPads

  • Distribute Apple apps

  • Network Access Control

• Windows

  • Windows Desktop and Tablet

  • Enroll Windows devices in bulk

Device policies

• AirPlay mirroring device policy

• AirPrint device policy

• App permissions device policy

• APN device policy

• App access device policy

• App attributes device policy

• App configuration device policy

• App inventory device policy

• Application Guard device policy

• App lock device policy

• Apps notifications device policy

• App uninstall device policy

• App uninstall restrictions device policy

• Automatically update managed apps

• BitLocker device policy

• Bluetooth device policy

• Calendar (CalDav) device policy

• Cellular device policy

• Connection scheduling device policy

• Contacts (CardDAV) device policy

• Custom XML device policy

• Declarative Device Management policies

  • Google Account device policy

  • Passcode device policy

  • Software Update Enforcement device policy

  • Software Update Settings device policy

  • Status Subscriptions device policy

  • User Identity device policy

• Defender device policy

• Device Guard device policy

• Device Health Attestation device policy

• Device name device policy

• Education Configuration device policy

• Endpoint Management options device policy

• Endpoint Management uninstall device policy

• Exchange device policy

• Files device policy

• FileVault device policy

• Firewall device policy

• Font device policy

• Home screen layout device policy

• Import iOS & macOS profile device policy

• Compliance Enforcement for Android device (Technical Preview)

• Keyguard Management device policy

• Kiosk device policy

• Knox Platform for Enterprise Key device policy

• Launcher configuration device policy

• LDAP device policy

• Location device policy

• Lock screen message device policy

• Mail device policy

• Managed configurations device policy

• Managed domains device policy

• Maximum resident users device policy

• MDM options device policy

• Network device policy

• Network usage device policy

• Office device policy

• Organization information device policy

• OS update device policy

• Passcode device policy

• Passcode lock grace period device policy

• Personal hotspot device policy

• Profile removal device policy

• Provisioning profile device policy

• Provisioning profile removal device policy

• Proxy device policy

• Restrictions device policy

• Roaming device policy

• SCEP device policy

• Siri and dictation policies

• SSO account device policy

• Store device policy

• Subscribed calendars device policy

• Terms and conditions device policy

• Tunnel device policy

• VPN device policy

• Wallpaper device policy

• Web content filter device policy

• Web clip device policy

• Windows Agent device policy

• Windows GPO configuration device policy

• Windows Hello for Business device policy

Add apps

• App connector types

• Citrix Launcher

• Add apps using Apple volume purchase

• Use ShareFile with Endpoint Management

• SmartAccess for HDX™ apps

• Upgrade MDX or enterprise apps

Deploy resources

• Macros

Monitor and support

• Connectivity checks

• Mobile Service Provider

• Reports

Restrict email access

• ActiveSync Gateway

• Endpoint Management connector for Exchange ActiveSync

• Citrix Gateway connector™ for Exchange ActiveSync

Advanced concepts

• Endpoint Management deployment

  • Management modes

  • Device requirements

  • Security and user experience

  • Apps

  • User communities

  • Email strategy

  • Endpoint Management integration

  • Integrating with Citrix Gateway and Citrix ADC

  • SSO and proxy considerations for MDX Apps

  • Authentication

  • Server properties

  • Device and app policies

  • Client properties

  • User enrollment options

  • App provisioning and deprovisioning

  • Dashboard-based operations

  • Role-Based Access Control and Endpoint Management support model

  • Citrix support process

• Sending group enrollment invitations in Endpoint Management

• Configuring certificate-based authentication with EWS for Secure Mail push notifications

• Configuring an on-premises Device Health Attestation server