Apple’s recent announcements have opened up new possibilities for users in both enterprise and personal spaces, thanks to groundbreaking advancements in iOS 18 and macOS 15. With features like the transformative power of Apple Intelligence, seamless device integration, and enhanced user experiences, these updates bring exciting opportunities for businesses and individuals alike. 

These new OS versions present a unique opportunity to revolutionize workflows, enhance security, and empower employees. Imagine streamlining tasks with intelligent automation, fostering collaboration through seamless device mirroring, and safeguarding sensitive data with advanced privacy controls.

iOS 18: A New Era of Possibilities

• Apple’s AI Game is Here: Apple Intelligence, a powerful new AI system, seamlessly integrates across various apps, empowering you with capabilities like rewriting, proofreading, and summarizing text effortlessly. It also fuels image creation tools, making it simple to craft animations or illustrations, and elevates photo curation for truly personalized memories.

• Advanced Messaging: Connect seamlessly with everyone, thanks to RCS support in iMessage for richer media sharing with non-Apple users, and satellite messaging for those in remote areas. Plus, enjoy features like message scheduling, animated text effects, and a wider range of emojis for more expressive communication.

• Customization and Privacy: iOS 18 empowers you to personalize your device like never before, with dynamic app icons, deeper home screen customization, and enhanced privacy controls. Lock or hide sensitive apps, and manage which contacts can access specific apps.

• Streamlined Browsing & Password Management: A revamped Safari Reader and the all-new Passwords app (replacing Keychain) deliver smarter content and simplify password management, including warnings for weak or compromised credentials.

• More for Accessibility: iOS 18 introduces revolutionary eye-tracking technology, enabling users to control their iPhones with their eyes, significantly enhancing accessibility for individuals with mobility limitations.

macOS 15: Elevate Your Enterprise Productivity

• iPhone Mirroring: Break down barriers between your devices! Seamlessly mirror your iPhone on your Mac, drag and drop files effortlessly, and stay on top of notifications without switching screens.
• Window Tiling: Master multitasking with precision. Effortlessly organize your workspace by snapping windows side-by-side or into corners, maximizing your screen real estate and streamlining your workflow.
• Presenter Preview for Video Conferencing: Project confidence in every meeting. Preview your appearance and background before sharing your screen in FaceTime or Zoom, ensuring a polished and professional presentation.
• Passwords App: Simplify and fortify your digital life. The new Passwords app is your one-stop shop for securely managing passwords, passkeys, and Wi-Fi credentials, all protected by end-to-end encryption and synced seamlessly across your devices.
• Gaming Enhancements: Level up your gaming experience. Immerse yourself in breathtaking soundscapes with personalized spatial audio and enjoy seamless support for the latest and greatest game titles.
• Safari Improvements: Surf smarter, not harder. Uncover captivating web content with the “Highlights” feature, and declutter your reading experience with the redesigned distraction-free Reader mode.
• Siri & Apple Intelligence: Your virtual assistant gets even smarter. Enjoy hands-free Siri interactions and let Apple Intelligence supercharge your productivity with smart tasks like text summarization and effortless media organization across your favorite apps.

Empowering Enterprise Adoption with Scalefusion

The new capabilities brought in by iOS 18 and macOS 15 can bring in new complexities for IT teams. Configuring and managing the expanded privacy settings, ensuring seamless integration of iPhone Mirroring with existing workflows, and optimizing device performance for resource-intensive features like Apple Intelligence requires careful planning and robust device management and policy governance.

At Scalefusion, we’re committed to empowering enterprises to embrace the full potential of Apple’s latest OS releases, without the complexities. That’s why we’ve developed a suite of features designed to streamline your transition to iOS 18 and macOS 15, ensuring you can harness their power, maximize productivity, and enhance security from the moment they’re launched.

These new features will not only simplify your day-to-day management of iOS and macOS devices but also equip you to proactively address the unique challenges the new OS versions present, ensuring your organization is prepared to leverage its full potential from the start.

• Configure Apple Intelligence Settings for iOS 18

Leaving Apple Intelligence enabled on corporate iOS devices can increase risks such as data exposure, intellectual property concerns, and potential security and compliance challenges. Managing access carefully is important to ensure these aspects are properly addressed.

What can enterprises do?

By restricting Apple Intelligence, you can maintain control over sensitive information and foster a secure work environment. You can now enable or disable Apple Intelligence settings on managed iOS devices running on iOS 18. You can restrict access by blocking features such as writing tools, Image Wand, and playground.

• iPhone Mirroring

Mirroring an iPhone screen could inadvertently expose sensitive company information displayed on the phone, such as emails, documents, or presentations, potentially leading to data breaches. Connecting an iPhone to a Mac via mirroring could create a potential entry point for malware or other security threats to infiltrate the corporate network.

What can enterprises do?

To ensure that you are in complete control, Scalefusion enables you to block device mirroring on managed iOS devices.

• Remote control in Shareplay for iOS 18

Remote control within Shareplay might conflict with industry-specific compliance requirements regarding data access and control. It poses a security risk by creating a potential entry point for unauthorized access, increasing the likelihood of data breaches or malware infections. It also raises privacy concerns as sensitive company data or personal information could be inadvertently exposed, leading to violations of policies or regulations.

What can enterprises do?

You can maintain a secure, compliant environment while safeguarding sensitive information and ensuring efficient operations by blocking the video conference remote control feature via Scalefusion.

• Disk management for macOS 15

For enterprises belonging to industries with stringent regulatory requirements, it is critical to control the external data sources that can be accessed via an enterprise Mac system. To help upkeep compliance, Apple has launched a new disk management configuration that helps IT teams to manage external and network storage.

What can enterprises do? 

You can now allow or block network storage or choose mounting to read-only via the Scalefusion dashboard. This new offering replaces the previously deprecated media management payload.

• Strategic OS updates

If your organizational IT infrastructure is not prepared to handle the new iOS 18 and macOS 15 capabilities, you can also choose to defer OS updates with Scalefusion. In the OS Update Management Settings, you can defer software updates for up to 90 days.

This empowers you to thoroughly test the new updates, ensuring a smooth and controlled rollout across your organization through phased deployment.

What’s Next

We’re hard at work on additional features to further enhance your Apple device management experience. These upcoming updates will:

• Simplify device onboarding by leveraging Apple Intelligence during automated device enrollment.
• Strengthen your security posture by enforcing minimum OS versions across your device fleet.
• Enhance user experience and branding with customizable light/dark modes and tinted icons for our MDM client and productivity apps.

Embrace the Future of Apple with Scalefusion

As Apple continues to innovate, we’re dedicated to providing you with the tools you need to manage your Apple devices effectively. Our new features empower you to harness the full potential of iOS 18 and macOS 15 while maintaining the highest standards of security and control. Watch this space for more exciting developments! 

According to a recent report, breaches involving admin accounts have increased by 17% from 2023^[1]. Moreover, approximately 45% of ransomware attacks targeted specifically admin accounts in 2024^[2]. 

These statistics highlight that administrator accounts are prime targets for hackers, as gaining access to such accounts grants full control over administrative actions, including user management, file access, and app installation, posing significant security risks.

Traditional administrative access methods are often inadequate in addressing these risks. The lack of automation can result in users retaining extended admin access, which increases the potential for security breaches.

Furthermore, sharing admin credentials among multiple users escalates the issue, heightening the risk of malware attacks and data breaches, and compromising sensitive organizational information.

This underscores the need for a robust privileged access management solution, such as Scalefusion’s Just-In-Time Admin Access feature. This blog will explain what Just-In-Time Admin Access entails and highlight the key capabilities of this feature.

What is Just-In-Time Admin Access?

Scalefusion offers privileged access management with the Just-In-Time Admin Access feature. This feature ensures that users operate with standard privileges, offering a secure way to access temporary admin privileges only when necessary. It significantly reduces the risks associated with excessive user privileges by providing elevated access only when required, maintaining security while minimizing potential threats.

Just-In-Time Admin Access enables users to obtain temporary access to launch applications in admin mod, on managed Windows devices. This feature ensures that users operate with elevated privileges securely and only when necessary, allowing them to perform essential tasks without prolonged admin access.

Key Features of Just-In-Time Admin Access for Windows Devices

1. JIT Admin Configuration

JIT admin configuration allows IT admins to configure:

a. Duration of Admin Privilege

IT admins can specify the duration (in minutes) during which the user can access the applications in elevated mode. Once the duration ends, the app will be automatically closed. Admin can set the duration from 5 to 60 minutes.

b. Allowed number of Requests per Day

IT admin can enable this setting to allow users to elevate the applications with admin privileges by entering other admin’s credentials. Users will be able to elevate applications using only the Scalefusion account if the admin credentials are not available

c. Enforce Request justification text

Administrators can make it compulsory for Windows device users to enter the reason for requesting access to any application with elevated access.

d. Enforce active internet connection

If this setting is enabled, a Windows device user must have an active internet connection to access any application in admin mode

e. Allow users to elevate using other Admin credentials

IT admin can enable this setting to allow Windows users to elevate the applications with admin privileges by entering other admin’s credentials. If the admin credentials are not available, users will be able to elevate applications using only the Scalefusion Account.

f. Configure Disclaimer Note

IT admins can enter a disclaimer note for users that is displayed on the JIT Admin screen to notify them when the set duration ends.

2. Log and Activities

a. Monitor Admin Access and Collect logs

Admins can configure whether logs monitoring the number of times critical operations and applications were started/stopped with admin privileges, should be captured and synced to the dashboard.

3. Elevation Scope

Elevation scope enables IT admins to set a limit of access elevation. It allows them to configure the following settings:

a. Configure Accounts That Can Request Admin Access

IT admins can configure whether all non-admins accounts or specific accounts on the device can request to access the application in elevated mode. If the admins select ‘Specific Accounts’, they must provide the names of user accounts to whom they want to grant access.

b. Select Applications that can be Run as Administrator

Administrators can select which applications should run as an administrator. They can choose from three options:

• ‘All Allowed Applications’ enables all applications specified in the Select Apps section of the Device Profile.

• ‘All Applications’ permits any application on the managed device to be run as an administrator.

• ‘Specific Applications’ restricts administrative access to particular applications. Admins must add the application names by clicking “Add Application” and providing relevant details such as the app name and version.

c.  Override Duration of Admin Privilege

Admins can specify the duration (in minutes) after which the admin privileges will be automatically revoked, automatically closing the app. This setting overrides the duration of admin privileges configured as a part of JIT Admin Configuration. The time duration ranges between 1 to 1440 mins.

4. JIT Admin Access Summary

JIT Admin Access summary provides IT admins with the following details:

a. Device Summary

The device summary offers a comprehensive overview, detailing the total number of devices with Just-In-Time (JIT) Admin configuration applied, the count of standard users on these devices, and the number of admin users. This summary provides clear visibility into the user distribution and administrative access across the configured devices.

b. Request Summary

Request Summary gives IT admins an overview of the number of admin requests made during a single day and the total number of admin requests made during the last 60 days.

c. Device Overview

With the device overview section, admins can access a consolidated tabular view of the name of devices where the configuration has been applied, the serial number of devices, the number of requests received from the device today, the total number of admin requests received from the device, the name of the configuration applied to the device.

5. Activity Logs

Activity logs enable admins to view activities done by the users on the device, during their elevation from standard to admin user. Apart from the device name and serial number, activity logs include the names of users requesting JIT Admin Access, the files accessed, the start and end time of the JIT admin activity (indicating when the user was elevated to admin and when they were downgraded back to a standard user), and the justification text entered by the user when requesting JIT admin access.

6. Recommendations

The recommendations section offers a summarized view of the admin accounts available on the devices. It includes the names and serial numbers of JIT-configured devices, the total number of users and admins on each device, the number of managed admins, and the name of the JIT Admin configuration applied.

Optimize User Privilege Escalation for Windows with Scalefusion OneIdP

Scalefusion OneIdP provides organizations with robust identity and access management capabilities. It allows organizations to gain full control over user privilege elevation by offering time-based admin access, preventing users from obtaining extended admin access, securing data, and maintaining system integrity.

Ensuring compliance with regulations and maintaining high-security standards has become crucial in the aviation industry. According to a report, the aviation industry scores a “B” on average. While this isn’t a failing grade, organizations with a B rating are 2.9x more likely to be victims of data breaches than those with an A rating^[1]. Further, with the increasing integration of digital technologies in airports and airlines, managing the vast array of devices and protecting sensitive data has become more complex.

Unified endpoint management (UEM) solutions are designed to address such compliance and security-related challenges by providing a centralized approach to managing and securing a wide range of devices and data.  

This blog highlights the compliance and security challenges in the aviation industry and the key features offered by Scalefusion to help airlines maintain security and compliance.

Compliance and Security Challenges in Aviation

1. Regulatory Compliance 

The aviation industry operates under a stringent regulatory framework to ensure safety, security, and efficiency. For instance, the International Civil Aviation Organization (ICAO) has set various international standards and regulations for security compliance in the aviation industry. 

For aviation data security, it mandates periodic offline secure backup and encryption of sensitive data to maintain information availability and integrity. Similarly, the physical security controls include, defining access management and control policies, background checks of personnel with administrative rights on databases, or with access to sensitive data. 

Similarly, for information, communication, and technology ICAO mandates access control policies and application of least privilege principles, software/hardware firewalls and network security, cryptography, organizational password policies, end-point protection, network monitoring and detection of anomalies, network separation, and device management. 

Moreover, due to the global nature of the aviation industry, compliance with GDPR is essential for airlines operating within or serving the European Union. GDPR imposes strict data privacy and protection rules, requiring airlines to implement robust data security practices. The challenge here is ensuring passenger data is collected, securely stored, and shared within a controlled environment and only with authorized airline personnel. Non-compliance can result in significant fines, up to 4% of the airline’s annual global turnover or €20 million, whichever is higher.^[2]

2. Monitoring Airport Physical Infrastructure

Airports rely on a complex network of sensors and servers to ensure the smooth operation of various systems, from baggage handling and advertisement screens at airports to inflight cockpit devices and seatback entertainment screens. The challenge lies in continuously monitoring and maintaining this infrastructure to prevent disruptions and malicious attacks. Aviation organizations can leverage a robust endpoint management solution to manage and protect all endpoints from vulnerability threats. 

3. Authorized Access 

Ensuring that only authorized personnel access sensitive data is critical for maintaining data security and integrity. This involves implementing robust identity and access management (IAM) solutions to control who can access what information and when. The aviation industry has a diverse workforce, which includes pilots, ground staff, maintenance crews, and administrative personnel, managing each of their access rights is a tedious task for IT admins. A data breach in an airline company or an airport can have catastrophic consequences, leading to unauthorized access to flight control systems or passenger data. 

4. Securing Large Volumes of Customer-sensitive Data

The aviation industry manages vast amounts of sensitive customer data, including personal identification details, travel itineraries, and payment information. Protecting this data from breaches is crucial. Recent incidents highlight the urgency, a Hong Kong-based airline experienced a breach affecting 9.4 million passenger records, while a UK-based airline lost 9 million customer records to hackers^[3]. 

Similarly, an Indian airline suffered a breach that exposed sensitive data, including credit card information and frequent flyer details, of approximately 4.5 million customers^[4]. It is a crucial challenge to safeguard data during transmission and storage and ensure compliance with various data protection laws. 

Key Features of UEM for Adhering to Compliance and Upkeeping Security in the Aviation Industry

Unified endpoint management (UEM) solution transforms the above complexities into streamlined and secure operations. It serves as a centralized and intuitive solution to address the compliance and security challenges faced by airports. 

1. Centralized Management 

UEM solution extends centralized control through a unified dashboard or console. Devices in an airport environment operate 24/7, requiring constant monitoring from IT. A unified management console provides this visibility, helping minimize any oversight. By enabling IT admins to respond promptly to routine operations and any issues that arise UEM offers real-time visibility into the entire device ecosystem, providing instant insights into each device’s status, health, and performance.

2. Data Encryption

Robust data encryption is essential for protecting the confidentiality and integrity of passenger data, a critical requirement under GDPR. UEM solutions enforce strong passcode policies and ensure sensitive data stored on devices is encrypted, safeguarding it from unauthorized access. This feature addresses security concerns by preventing data breaches and ensuring compliance with ICAO data protection regulations.

3. Geofencing & Location Tracking

Geofencing and location tracking capabilities enhance the management and control of device whereabouts, ensuring streamlined operations and staff safety. For example, geofencing can restrict the ground staff’s access to no-entry areas such as runways. 

IT admins can monitor if airport personnel aren’t at their designated place and can quickly locate them with location tracking. while location tracking can quickly locate personnel. These features are important for streamlined operations and aviation staff safety.

4. OS Updates and Software Deployments

UEM allows admins to execute updates, patches, and software deployments seamlessly across all devices from a centralized dashboard. Regular updates ensure that devices are equipped with the latest features and security protocols, reducing the risk of vulnerabilities that could lead to non-compliance. This feature helps maintain the integrity and security of the device ecosystem, ensuring continuous compliance with regulatory standards.

5. Access Controls

Setting and managing access controls ensures that only authorized personnel can access specific device features or functionalities. UEM solutions for aviation offer a range of access control features, such as role-based access control, which provides user access based on their role in the organization. For instance, enforcing access controls will restrict the access of ground staff to sensitive files with customer information. These controls are essential for maintaining compliance with regulatory requirements and protecting sensitive data from unauthorized access.

6. Policy Enforcement

Consistent policy enforcement across all devices is critical for airport device management. A UEM solution allows administrators to set and enforce policies related to security, usage, and configurations, fostering a standardized and secure operational environment. 

Policies can vary based on staff roles, and UEM enables admins to create device and user groups to apply these policies seamlessly. Each airport is unique, and UEM offers customizable policies that administrators can tailor to the specific needs and nuances of their operational environment, ensuring UEM aligns seamlessly with the airport’s workflow.

7. Remote Lock and Wipe 

If a device gets lost or stolen, with remote wipe and lock feature, IT admins can erase all the sensitive data from the device. This feature prevents unauthorized access to confidential information, mitigating the risk of data breaches. UEM solutions help airports comply with data protection regulations and maintain a strong security posture by ensuring consistent data security.  

8. Kiosk Mode

Kiosk mode restricts devices to specific applications and functionalities, ensuring that they are used only for their intended purposes. This feature is particularly useful in securing devices used by passengers, such as self-service kiosks and seatback entertainment systems. It helps prevent unauthorized access and usage, thereby maintaining a secure and controlled environment. 

9. Broadcast Messages

Broadcast messages enable instant communication with all devices, which is essential during emergencies or critical updates. For instance, in the event of a security threat, IT teams at airports can quickly send out alerts and instructions to all managed devices, ensuring a coordinated and swift response. 

Ensure Compliance and Security in Aviation with UEM 

Aviation is a rapidly evolving and highly competitive industry, where operational excellence is necessary for maintaining compliance and security. Unified endpoint management (UEM) solutions like Scalefusion UEM offer various data and device security features, enabling airline IT professionals to manage diverse device ecosystems and safeguard sensitive information. 

As airports and airlines adopt digital transformation initiatives, the role of UEM becomes critical. Moreover, Scalefusion offers comprehensive capabilities that address aviation challenges – on the ground and in flight. Scalefusion enhances operational efficiency among the airline staff and delivers a safer, more connected travel experience for passengers while ensuring aviation safety and compliance and maintaining security. 

Contact our experts to schedule a demo and experience how Scalefusion UEM maintains compliance and security. Get started by signing up for a 14-day free trial today!

References 

1. Air Traffic Management

2. Iubenda

3. & 4.  SISA

Beyond just getting the devices up and running, ensuring a smooth and straightforward device setup process is essential for both IT teams and end-users. More often than not, the initial setup is challenging for IT teams, with several IT hours spent setting up user accounts, configuring network settings, and deploying necessary software. 

One of the major hurdles IT admins face while configuring the ADE/DEP setup for Apple devices is managing account privileges. While the Primary Account should ideally be set as a Standard Account to enhance control and mitigate security risks, it’s often complicated by the need to assign Admin privileges. This not only adds to the complexity of device management but also introduces potential security vulnerabilities.

Additionally, there’s the challenge of maintaining a dedicated management account for routine administrative tasks. This account is crucial for tasks like maintenance and scripting but must also be secure and easily accessible—even in scenarios where the password is forgotten.

We recognized these challenges and to solve them, we’ve introduced the Pre-Stage Setup for Account Creation feature within the ADE/DEP enrollment process.

With this feature, we aim to help streamline device setup on Scalefusion while also significantly enhancing IT teams’ efficiency. By automating the account creation process, IT teams can now minimize the potential configuration drift and reduce manual errors, ensuring consistency across devices. This ultimately saves valuable time for IT teams, allowing them to focus on more strategic tasks.

It supports the creation of an ADE Admin account and enables password changes via Scalefusion MDM, without requiring the Scalefusion Agent. This ensures that the admin account remains consistently accessible on all enrolled devices.

How Does It Work: Simplifying Account Setup During Enrollment

During the ADE/DEP enrollment process, IT admins can now pre-configure primary account details, making the initial device setup more intuitive and user-friendly. Whether you want to prefill account information or skip account creation entirely, the choice is yours.

With this feature, IT teams can choose to:

Create a Primary Account:

Use custom properties (like $device. or $user.) to automatically prefill account details, and decide whether users can modify these details during setup. Additionally, you can control whether the Primary account will be set as an Admin or a Standard account.

Skip Primary Account Creation:

Opt to bypass the creation of a primary account, streamlining the process for situations where it’s unnecessary. This option is particularly useful when IT admins need to set up the device themselves before handing it over to the user at a later point. In such cases, the admin can create an Auto-Admin account and skip the primary user account creation.

And there’s more. IT teams can choose to create an Admin account during the enrollment process. For those who require an admin account during enrollment, the Pre-Stage Setup offers the option to create ADE Admin accounts seamlessly.

Not only can this account be hidden from the end-user, but it can also be configured as the managed or enrolled user instead of the default primary account.

These accounts are displayed as ADE accounts in the UAM section and cannot be downgraded to standard users or deleted, ensuring a consistent level of control and security.

To get started with the configuration, you do not need the Scalefusion MDM agent,

Closing Lines…

The Pre-Stage Setup for Account Creation is set to redefine the enrollment experience for macOS devices, providing IT teams with the tools to create a smooth, efficient, and user-friendly setup process. This enhancement not only reduces the cognitive burden on IT teams but also ensures that end-users have a hassle-free experience from the moment they power on their device.

We’re thrilled to bring you this feature as part of our ongoing commitment to improving device management. Stay tuned for more updates as we continue to innovate and evolve.

Exciting updates have arrived from July and August 2024! 

We’ve introduced a range of new features and enhancements designed to take your Scalefusion experience to the next level. Discover how streamlined Apple device management, advanced OneIdP SSO configurations, and innovative solutions for Windows and Android devices can make your device management more efficient and intuitive.

Explore the latest updates and see how they can transform your operations!

1. OneIdP SSO Configuration for Linux

Now leverage Single Sign-On (SSO) for Linux devices. Set up conditional access for users accessing SAML-based web apps from unmanaged Linux devices, ensuring they enroll to continue access.

2. New Updates to Apple Device Management

• Pre-Stage Setup for Account Creation for macOS: Configure account creation during the ADE/DEP enrollment process, making the initial device setup smoother and more intuitive for end-users. You can customize the primary account settings using custom properties or create an admin account during enrollment.
• System Logs for macOS: Collect the Device Console logs of your managed devices right from the Scalefusion dashboard.  Collect complete logs or define specific filters and predicates, adding multiple search properties.
• Updates to Password Policy: Set a specific duration after which a disabled account can log back into macOS devices using the “Reset Time After Max Failed Attempts” option. Additionally, you can now configure a 45-day password expiry period for both iOS and macOS devices.
• Profile changes: Easily find the deprecated settings under the macOS device profile section and configure essential and available policies with our UI enhancements. Prevent accidental data sync issues with the default enable of iCloud settings for new profiles.

3. What’s New on Scalefusion Dashboard

• Policy & Actions Report: You can now receive a report whenever a policy change is pushed or an action is performed, detailing whether or not the action was executed.  You can access the summary of the last 5 events per device and the complete Policy and Action Report in the device details section.
• Multi-Group Selection in DeepDive: Select multiple groups in DeepDive and view a combined report encompassing all selected groups.
• Policy and Profiles as PDF: Obtain the details of policies and actions performed on any device. Download the applied profile and policy settings as a PDF. This option can be accessed via the Print button in the list of profile actions. You can also download Android BYO and Apple AUE profiles as PDFs.
• Auto-Renewal for Subscriptions: Managing subscriptions just got easier with our new Auto-Renewal feature! Set subscriptions to auto-renew at the time of purchase or renewal and disable it anytime. You can also associate and update credit cards for auto-renewal as needed
• Admins and Roles: Streamline company information and configure and update the billing address, Point of Contact, key contacts for billing, and email notifications from Scalefusion as well as the Apple Bussiness Manager Email Notification settings. Control these settings via RBAC and customize access for custom roles.

4. Updates to Windows Device Management

• Compliment your modern management with Scalefusion for Windows: Enroll Windows devices managed using any other modern management tool on Scalefusion and leverage Scalefusion’s advanced features such as Remote Control, Kiosk Mode, Script Execution, and MSI installation for Windows without migrating from your existing solution.
• Custom Properties in Windows Add Application: Use custom properties when adding application details in Windows profiles. You can configure applications based on device-specific paths, ensuring that each device gets the correct application setup.

5. Updates to Scalefusion OneIdP

• Integrate Reddiffmail for work with Scalefusion OneIdP:  Import users from the Rediffmail service to the OneIdP directory, create SSO configuration, enable conditional access, and authenticate and authorize users with their Rediffmail IDs on work apps.
• Make way for Exceptions: Define exceptions for conditional access, right from enrollment exceptions to user exceptions and exceptions for Linux devices. Enforce administrators accessing the Scalefusion dashboard to enroll their respective devices into Scalefusion.
• User Account Activation: Track user account activations when users reset their passwords via invitation emails or enroll devices. The updated Directory page now displays the activation status,  no of users that have activated accounts, and the pending accounts. Send reminders to pending users directly from this page, facilitating a smoother transition to SSO powered by OneIdP.

6. What’s New for Android Device Management

• SCEP CA Server Integration for Android: Automate certificate deployment on Android devices by integrating a SCEP-based CA server. SCEP is a simple certificate enrollment protocol that helps generate certificates from a template.
• Addition of New Device Properties: Access additional device properties with $device. Obtain more detailed device information and improve asset management.
• OEM Config Duplicity Issue in Android Profiles: Prevent issues with duplicating OEM configurations when cloning Android profiles. The OEM Configs are no longer cloned when profiles are duplicated.
• Customizable screen for kiosk devices: Explore an all-new customizable Scalefusion Kiosk/launcher screen. Add multiple pages, and position icons at exact locations on the device screen or group the apps and browser shortcuts into folders.
• New Workflows: Leverage network compliance workflow to define network-based device access rules based on IP Address, Wi-Fi SSID, or metered networks. With the enhancements to battery compliance workflow, automate actions to reduce battery consumption:
• Updates to password policy: Reduce password reset requests with password self-service. Allow end-users to reset their device password/PIN locally on the device if they forget the password/PIN.
• New Report for Pitstop: Download the Distance Traveled Summary, a comprehensive day-wise breakdown of distances traveled for all devices. The Distance Traveled Summary report can also be scheduled for regular updates.
• Version Update Utility for PfW Apps: Keep your PfW apps up-to-date with our new Version Update Utility.
• Scalefusion Android MDM Agent: Try the updated Scalefusion Android MDM agent using the most recent SDK version following Google’s guidelines. Manage accounts that can be added to the Gmail app with a new remote command. Prevent users from adding personal accounts using Gmail in both CO and BYO modes.

Closing Lines

These updates showcase our dedication to enhancing your Scalefusion experience with the latest features and improvements. From advanced SSO configurations and streamlined Apple device management to innovative solutions for Windows and Android, we’re committed to making your device management more efficient and intuitive. We’re eager to hear your thoughts on these new features and how they’re impacting your operations.