Android N support for Android Enterprise

Information about Android N features that are supported by MaaS360® for Android Enterprise.

QR code-based activation for Android Enterprise Device Owner (DO) mode

MaaS360 now supports QR code scanning for Android Enterprise activations of Device Owner (DO) mode. In previous releases, MaaS360 supported activating devices by using near field communication (NFC) technology for Android Enterprise in Device Owner (DO) mode.

To access QR code-based activation, go to the MaaS360 Portal Home page, and select Devices > Enrollments > More > QR code Enrollment.

Note: The device is placed in Device Owner (DO) mode. You must manually enroll the device even though the MaaS360 app automatically installs on the device.

For QR code enrollment, you must provide the wifi settings that the Android Enterprise device connects to after the device is enrolled in Device Owner (DO) mode.

Android Enterprise policy features for Android N devices

In the 10.58 platform release, MaaS360 supports new Android Enterprise policies that are supported on Android N devices. The following Android Enterprise policies are now available for Android N devices:

Always on VPN for Profile Owner (PO) mode and Device Owner (DO) mode devices: This policy makes sure that certain apps always use the VPN for all communications. If the device is rebooted, the VPN connection is automatically reestablished and the connection is always on.
Disable work apps: This policy disables certain apps from being used by Android Enterprise devices. From the MaaS360 policies, you can configure the app ID for each app that must be disabled on the device and then deploy the configuration to devices.
Custom messages for disabled services and customer lock screen messages: An error message is displayed when a user taps on a disabled setting on an Android Enterprise device. You can customize this message to include additional details for the user. The message can be 200 characters long and supports customizations in various locales. You can also display a custom message to the user on the lock screen of the device. The following settings are available for this policy:
Lock down settings: This policy locks down user icons or the wallpaper on an Android Enterprise device. You can configure enterprise processes by using MaaS360 policies. The administrator can prevent the user from changing the icon or the wallpaper that is associated with the user profile on a Device Owner (DO) mode device.
Dialer for work profile: This policy provides a separate dialer app in the Android Enterprise work profile mode on Profile Owner (PO) mode devices. A separate dialer within Android Enterprise is displayed to the user to call contacts from the work profile. In the MaaS360 policies, you can configure a list of dialer apps that are allowed in the work profile.
Contact restrictions: This policy restricts users from accessing work contacts from other work profiles.
Miscellaneous settings:
The 10.58 platform release also includes policies to configure the following settings:
- Remote bug reporting (Device Owner mode only)
- Remote reboot (Device Owner mode only)
- Device health monitoring (Profile Owner mode and Device Owner mode)

Dynamic admin bypass for Kiosk mode devices

MaaS360 now supports a dynamic one-time passcode to unlock kiosk devices. The static password to unlock Kiosk mode is hidden from departmentalized administrators so that administrators must use a dynamic unique passcode to unkiosk the device each time. You can enable this feature with MaaS360 policies for Android devices under Kiosk mode.

To generate a new one-time passcode, follow these steps:

From the MaaS360 Portal Home page, select Devices > Inventory.
From the Actions menu, generate a new one-time passcode on the device to unkiosk the device.