Enhancements to MaaS360 DEP user authentication based on the DEP customization

The following enhancements were made to MaaS360® DEP user authentication based on the DEP customization.

  • On the Basic Enrollment Settings page (Configuring directory and enrollment settings in the IBM MaaS360 Portal) in the MaaS360 Portal, you can now enable two-factor authentication or SAML-based authentication as the default user authentication mode for the DEP enrollment on iOS 13 or macOS 10.15 and later devices. Go to Setup > Settings > Directory and Enrollment Settings > Basic Enrollment Settings, and then select Authentication Mode for Enrollment. These authentication methods only apply if the Authenticate User setting is enabled in the DEP profile. For more information about the DEP profile, see Adding a profile to the Apple Device Enrollment Program (DEP).
  • The DEP customization allows you to view more web user interfaces for user authentication during DEP enrollment. MaaS360 provides a new user interface that is based on the type of user authentication method that you selected in the Directory and Enrollment settings. For more information about two-factor authentication and SAML-based authentication, see Enrolling DEP devices using two-factor authentication and Enrolling DEP devices using SAML-based authentication.
  • MaaS360 also enhanced the Corporate Usage Policy (CUP) for DEP device enrollment on iOS 13 and macOS 10.15 devices. Use this policy to customize the EULA policy (Acceptance Usage Policy) that you want users to view and accept during DEP device enrollment.
    1. From the MaaS360 Portal home page, go to Setup > Settings > Directory and Enrollment > Advanced Enrollment Settings.
    2. From the Unified Enrollment Flow section, add the Corporate Usage Policy.
    For more information, see Applying the Corporate Usage Policy to DEP devices. This customization provides a unified enrollment experience, where the user authentication method during device enrollment is unified across all device platforms (Android, iOS, macOS, Windows). This unified enrollment also includes DEP devices for iOS 13 and macOS 10.15.
    Note: To apply the Corporate Usage Policy during DEP enrollment, you must enable the setting in the DEP profile (Adding a profile to the Apple Device Enrollment Program (DEP)). For more information, see Applying the Corporate Usage Policy to DEP devices.