Product Documentation

To add a Kiosk device policy for Samsung SAFE

Feb 27, 2015

You create a Kiosk policy in XenMobile to let you to specify that only a specific app or apps can be used on Samsung SAFE devices. This policy is useful for corporate devices that are designed to run only a specific type or class of apps. This policy also lets you choose custom images for the device home screen and lock screen wallpapers for when the device is in Kiosk mode.

Note:
  • All apps that you specify for Kiosk mode must already be installed on the users' devices.
  • Some options apply only to the Samsung Mobile Device Management API 4.0 and later.
  1. In the XenMobile console, click Configure > Device Policies. The Device Policies page appears.


    Select Policies page

  2. Click Add to add a new policy. The Add a New Policy dialog box appears.


    Select kiosk

  3. Click More and then, under Security, click Kiosk. The Kiosk Policy page appears.


    Kiosk device policy information page

  4. In the Policy Information pane, enter the following information:
    1. Policy Name: Type a descriptive name for the policy.
    2. Description: Optionally, type a description of the policy.
  5. Click Next. The Samsung SAFE Platform information page appears.


    Samsung SAFE kiosk device policy information page

  6. On the Samsung SAFE Platform information page, enter the following information:
    1. Kiosk mode: Click Enable or Disable. The default is Enable. When you click Disable, all the following options disappear.
    2. Launcher package: Citrix recommends you leave this field blank unless you have developed an in-house launcher to enable users to open the Kiosk app or apps. If you are using an in-house launcher, enter the full name of the launcher application package.
    3. Emergency phone number: Enter an optional phone number. This number can be used by anyone finding a lost device to contact your company. Applies only to the Samsung Mobile Device Management API 4.0 and later.
    4. Allow navigation bar: Select whether to let users see and use the navigation bar while in Kiosk mode. Applies only to MDM 4.0 and later.
    5. Allow multi-window mode: Select whether to let users use multiple windows while in Kiosk mode. Applies only to MDM 4.0 and later.
    6. Allow status bar: Select whether to let users see the status bar while in Kiosk mode. Applies only to MDM 4.0 and later.
    7. Allow system bar: Select whether to let users see the system bar while in Kiosk mode.
    8. Allow task manager: Select whether to let users see and use the task manager while in Kiosk mode.
    9. Common SAFE passcode: If you have set a general passcode policy for all Samsung SAFE devices, enter that optional passcode in this field.
    10. Define a home wallpaper: Select whether to use a custom image for the home screen while in Kiosk mode. The default is OFF.
    11. Define a lock wallpaper: Select whether to use a custom image for the lock screen while in Kiosk mode. The default is OFF. Applies only to MDM 4.0 and later. When either of the preceding options is enabled, a field appears to let you select the custom image by clicking Browse and navigating to the image's location.


      Samsung SAFE kiosk mode wallpaper selection

    12. Apps: Click Add and then do the following:
      1. New app to add: Enter the full name of the app to add. For example, com.android.calendar lets users use the Android calendar app.
      2. Click Add to add the app or click Cancel to cancel adding the app.
      3. Repeat steps i. and ii. for each app you want to add.
      Note: To delete an existing app, hover over the line containing the listing and then click the trash can icon on the right-hand side. A confirmation dialog box appears. Click Delete to delete the listing or Cancel to keep the listing.

      To edit an existing app, hover over the line containing the listing and then click the pen icon on the right-hand side. Make any changes to the listing and then click Save to save the changed listing or Cancel to leave the listing unchanged.

  7. Expand Deployment Rules and then configure the following settings: The Base tab appears by default.


    Deployment rules

    1. In the lists, click options to determine when the policy should be deployed.
      1. You can choose to deploy the policy when all conditions are met or when any conditions are met. The default option is All.
      2. Click New Rule to define the conditions.
      3. In the lists, click the conditions, such as Device ownership and BYOD, as shown in the preceding figure.
      4. Click New Rule again if you want to add more conditions. You can add as many conditions as you would like.
    2. Click the Advanced tab to combine the rules with Boolean options.


      Advanced deployment rules with base rules

      The conditions you chose on the Base tab appear.
    3. You can use more advanced Boolean logic to combine, edit, or add rules.
      1. Click AND, OR, or NOT.
      2. In the lists that appear, choose the conditions that you want to add to the rule and then click the Plus sign (+) on the right-hand side to add the condition to the rule.

        At any time, you can click to select a condition and then click EDIT to change the condition or Delete to remove the condition.

      3. Click New Rule again if you want to add more conditions.

        In this example, the device ownership must be BYOD, the device local encryption must be True, and the device mobile country code cannot be only Andorra.

        Advanced deployment rules complete

  8. Click Next. The Kiosk Policy assignment page appears.
  9. Next to Choose delivery groups, type to find a delivery group or select a group or groups in the list to which you want to assign the policy. The groups you select appear in the right-hand Delivery groups to receive app assignment list.


    Policy assignment page

  10. Expand Deployment Schedule and then configure the following settings:
    1. Next to Deploy, click ON to schedule deployment or click OFF to prevent deployment. The default option is ON. If you choose OFF, no other options need to be configured.
    2. Next to Deployment schedule, click Now or Later. The default option is Now.
    3. If you click Later, click the calendar icon and then select the date and time for deployment.
    4. Next to Deployment condition, click On every connection or click Only when previous deployment has failed. The default option is On every connection.
    5. Next to Deploy for always-on connection, click ON or OFF. The default option is OFF.
      Note: This option applies when you have configured the scheduling background deployment key in Settings > Server Properties. The always-on option is not available for iOS devices.
    Note: The deployment schedule you configure is the same for all platforms. Any changes you make apply to all platforms, except for Deploy for always on connection, which does not apply to iOS.


    Deployment schedule

  11. Click Save to save the policy.