Getting started with Workspace ONE Mobile Threat Defense Dual Enrollment for Android Work Profile & COPE
With the Launch of Workspace ONE Mobile Threat Defense and the additions of Phishing and Content Protection there was still one use-case that was not supported. This is the Android Work Profile or COPE Enrollment with Protection on Personal and Work side. While this seems to be strange initially, it is definitely a quite importantUse Microsoft Conditional Access Registration status in Workspace ONE Intelligence for Reporting and Automation
With the UEM 23.10 Update for Conditional Access ( Details here: https://digitalworkspace.one/2023/12/20/workspace-one-uem-conditional-access-update-with-uem-23-10/ ) the UEM Admin part was much easier, but I thought it might be a good thing to not stop there. So what about to have this functionality in Intelligence, so having Reports, Dashboards and Automations there to have full visibility over theGet started with Play Integrity and VMware Workspace ONE UEM
As we saw some of false positive of SafetyNet Attestation on Android as part of compromised detection that customers may experience, like documented here https://kb.vmware.com/s/article/83272, there are major improvements on the with the newer Play Integrity API released by Google (https://developer.android.com/google/play/integrity) and also used by Workspace ONE UEM. Troubleshooting issues is just so much easierWorkspace ONE UEM Conditional Access Update with UEM 23.10
Since 2020 Workspace ONE UEM supports Conditional Access with Microsoft Azure AD (now Entra ID) . While last year VMware expanded support for Google BeyondCorp Conditional Access, I was still missing a nice GUI to see if a Device is registered or not and also a API that gets back the Registration was not there