Getting started with Workspace ONE Mobile Threat Defense Dual Enrollment for Android Work Profile & COPE
With the Launch of Workspace ONE Mobile Threat Defense and the additions of Phishing and Content Protection there was still one use-case that was not supported. This is the Android Work Profile or COPE Enrollment with Protection on Personal and Work side. While this seems to be strange initially, it is definitely a quite importantImproving MFA with Workspace ONE Access and User Choice of Authentication Method
Since January 2024, the Workspace ONE Access SaaS instances have a new feature that is bringing MFA to the next level for users. While I created some videos during that time, I somehow never documented it in a blog, so I finally did this in July 2024. To use the choice of authentication, go toPassword Manager in Chrome should be turned off on Android Shared Devices , see how and why
Starting with Version 125 of Android Version of Chrome the saved password of the Chrome App are not saved in the App , they get added to the Managed Play Account. This is fine on a Personal Dedicated device is User Based is used for Managed Play, but on Shared Devices like CICO with LauncherUse Microsoft Conditional Access Registration status in Workspace ONE Intelligence for Reporting and Automation
With the UEM 23.10 Update for Conditional Access ( Details here: https://digitalworkspace.one/2023/12/20/workspace-one-uem-conditional-access-update-with-uem-23-10/ ) the UEM Admin part was much easier, but I thought it might be a good thing to not stop there. So what about to have this functionality in Intelligence, so having Reports, Dashboards and Automations there to have full visibility over theGet started with Play Integrity and VMware Workspace ONE UEM
As we saw some of false positive of SafetyNet Attestation on Android as part of compromised detection that customers may experience, like documented here https://kb.vmware.com/s/article/83272, there are major improvements on the with the newer Play Integrity API released by Google (https://developer.android.com/google/play/integrity) and also used by Workspace ONE UEM. Troubleshooting issues is just so much easierUsing Dynamic Envrionment Manager for Intelligent Hub shortcuts on VDI (with icon!)
An interesting use case came from one of my great customers last week. They are operating Horizon Cloud on Azure Next-Gen environment with dedicated Pool Groups managed with Workspace ONE UEM. Obviously Intelligent Hub is installed, and an enrolment is done with enrolment scripts. The challange is to create Hub shortcusts on Desktops for easy