What's new

• Third-party notices

• Deprecation

System requirements

• Endpoint Management compatibility

• Supported device operating systems

• Language support

Onboarding and resource setup

• Scale and size considerations for Cloud Connectors

Certificates and authentication

• Citrix Gateway and Endpoint Management

• Domain or domain plus security token authentication

• Client certificate or certificate plus domain authentication

• PKI entities

• Credential providers

• APNs certificates

• SAML for single sign-on with Citrix Files

• Authentication with Azure Active Directory through Citrix Cloud (Preview)

• Authentication with Okta through Citrix Cloud (Preview)

• Authentication with an on-premises Citrix Gateway through Citrix Cloud (Preview)

• Derived credentials

User accounts, roles, and enrollment

• Enrollment profiles

• Notifications

• Configure roles with RBAC

• Licenses

Device management

• Alexa for Business

• Android

  • Migrate from device administration to Android Enterprise

  • Android Enterprise

  • Legacy Android Enterprise for G Suite Customers

  • Android OS

  • Control Android device connections by using Firebase Cloud Messaging

  • Android SafetyNet

  • Samsung

  • Samsung Knox bulk enrollment

  • Network Access Control

• Apple

  • iOS

  • macOS

  • Deploy devices through Apple Deployment Program

  • Bulk enrollment of Apple devices

  • Integrate with Apple Education features

  • Distribute Apple apps

  • Network Access Control

• Chrome OS

• Windows

  • Windows Desktop and Tablet

  • Windows Phone

  • Bulk enrollment of Windows devices

• Workspace hub device management

Device policies

• AirPlay mirroring device policy

• AirPrint device policy

• Android Enterprise app permissions

• Android Enterprise managed configurations device policy

• Android Enterprise permissions

• APN device policy

• App access device policy

• App attributes device policy

• App configuration device policy

• App inventory device policy

• Application Guard device policy

• App lock device policy

• Apps notifications device policy

• App restrictions device policy

• App tunneling device policy

• App uninstall device policy

• App uninstall restrictions device policy

• BitLocker device policy

• Browser device policy

• Calendar (CalDav) device policy

• Cellular device policy

• Connection scheduling device policy

• Contacts (CardDAV) device policy

• Content device policy

• Copy Apps to Samsung Container device policy

• Credentials device policy

• Custom XML device policy

• Defender device policy

• Device Guard device policy

• Device Health Attestation device policy

• Device name device policy

• Education Configuration device policy

• Endpoint Management options device policy

• Endpoint Management uninstall device policy

• Enterprise Hub device policy

• Exchange device policy

• Files device policy

• FileVault device policy

• Firewall device policy

• Font device policy

• Home screen layout device policy

• Import Device Configuration device policy

• Import iOS & macOS Profile device policy

• Keyguard Management device policy

• Kiosk device policy

• Knox Platform for Enterprise device policy

• Launcher configuration device policy for Android

• LDAP device policy

• Location device policy

• Lock screen message device policy

• Mail device policy

• Managed bookmarks device policy

• Managed domains device policy

• Maps device policy

• Maximum resident users device policy

• MDM options device policy

• Network usage device policy

• Office device policy

• Organization information device policy

• OS Update device policy

• Passcode device policy

• Passcode lock grace period device policy

• Personal hotspot device policy

• Power management device policy

• Profile Removal device policy

• Provisioning profile device policy

• Provisioning profile removal device policy

• Proxy device policy

• Public session device policy

• Restrictions device policy

• Roaming device policy

• Samsung MDM license key device policy

• SCEP device policy

• Siri and dictation policies

• SSO account device policy

• Storage encryption device policy

• Store device policy

• Subscribed calendars device policy

• Terms and conditions device policy

• Verified Access device policy

• VPN device policy

• Wallpaper device policy

• Web content filter device policy

• Web clip device policy

• WiFi device policy

• Windows Agent device policy

• Windows Hello for Business device policy

• Windows GPO configuration device policy

• Windows Information Protection device policy

Add apps

• App connector types

• Citrix Launcher

• Apple Volume Purchase

• Deploy Microsoft Store for Business apps from Endpoint Management

• Use Citrix Content Collaboration with Endpoint Management

• SmartAccess for HDX apps

• Upgrade MDX or enterprise apps

Deploy resources

• Macros

Monitor and support

• Connectivity checks

• Mobile Service Provider

• Reports

• Endpoint Management Analyzer

Restrict email access

• ActiveSync Gateway

• Endpoint Management connector for Exchange ActiveSync

• Citrix Gateway connector for Exchange ActiveSync

Advanced concepts

• Endpoint Management deployment

  • Management modes

  • Device requirements

  • Security and user experience

  • Apps

  • User communities

  • Email strategy

  • Endpoint Management integration

  • Integrating with Citrix Gateway and Citrix ADC

  • SSO and proxy considerations for MDX Apps

  • Authentication

  • Server properties

  • Device and app policies

  • Client properties

  • User enrollment options

  • App provisioning and deprovisioning

  • Dashboard-based operations

  • Role-Based Access Control and Endpoint Management support model

  • Citrix support process

• Sending group enrollment invitations in Endpoint Management

• Configuring certificate-based authentication with EWS for Secure Mail push notifications

• Configuring an on-premises Device Health Attestation server