Wi-Fi

The Wi-Fi settings provide connection parameters that enforce the use of the corporate wifi network on Android devices.

Wi-Fi Profile

The following table describes the wifi profile settings that you can configure on an Android device.
Policy setting Description Supported devices
Service Set Identifier (SSID) The SSID (unique wifi network name) for the wifi network. Android 7.0+ (PO and DO)
Non-Broadcast SSID The wifi network is hidden and not broadcasting the SSID. Android 7.0+ (PO and DO)
MAC randomization mode The MAC randomization feature helps Android devices to use a randomized MAC address when they connect to a wifi network and increases the user privacy. The following MAC randomization types can be selected in the Wi-Fi Profile when you connect to a Wi-Fi network.
  • Use device MAC - No randomization
  • Use automatic MAC randomization
  • Use persistent MAC randomization
  • Use nonpersistent MAC randomization
 Android 13.0+ (PO and DO)
Wi-Fi configuration type The security type for the wifi network.
  • Open
  • WEP
  • WPA/WPA2
  • 802.1x EAP
 Android 7.0+ (PO and DO)
802.1x The following fields are displayed when you select the 802.1x EAP configuration type.
  • EAP authentication protocol
    The Extensible Authentication Protocol (EAP) that is used to authenticate users against the authentication server.
  • Phase 2 authentication protocol
    The Phase 2 authentication protocol that is used to authenticate users against the authentication server.
  • CA certificate
    Upload files and then select the required certificate in the following path:

    Security > Policies > More > Policy Files

    Note: This setting requires that the Passcode policy is also configured on the device.
  • Identity certificate
    The field requires the passcode policy to be configured on the device. The Username, Domain, and Password fields are required for Multi Factor Authentication. For certificate-based authentication, leave this field blank.
  • Server certificate domain suffix match
    A semi-colon separated list of domains that are suffix-matched to authentication server certificate alternative subject dNSName elements.

    For example, domain.com; example.com.

    Matches: A certificate with domain.com, example.com, or any subdomains of those domains in the dNSName of the SubjectAltName. If either the domain suffix or alternative subject matches are not set, the Wi-Fi connection may not be configured on the device.

    Note: Wildcards are not supported. This field performs a suffix-match, meaning that if you enter domain.com, it matches test.domain.com but not test-domain.com. This is a recommended field to use in general.
  • Server certificate alternative subject match
    A semi-colon separated list of alternative subject matches. One or more substrings to be matched against the alternative subject of the authentication server certificate.

    For example, DNS:server.example.com; EMAIL:server@example.com

    Matches: A certificate with a dNSName of server.example.com (or subdomains), or with an Email of server@example.com in the SubjectAltName. If either the domain suffix or alternative subject matches are not set, the wifi connection will not be configured on the device.

    Note: It is an advanced field that is typically used when domain suffix match is not applicable.
  • Authentication username, authentication domain, authentication password
    The credentials that are required to connect to the wifi network.

    Provide %username%, %domain%, and %password% to enable users to use their corporate credentials.

Important: Configure either a domain suffix match (Server certificate domain suffix match) or an alternative subject match (Server certificate alternative subject match) for devices that are running Android 11 or later. Otherwise, the device might not connect to Wi-Fi
 Android 7.0+ (PO and DO)
Proxy type The method that a device uses to connect to a local proxy server to access a wifi network: Manual or automatic.
For an automatic connection, provide the following options.
  • The URL for the proxy server.
  • The port that the proxy server uses for an outbound connection.
 Android 7.0+ (PO and DO)
Exclusion list The comma-separated values of the hostnames that are excluded from the proxy. For example, *.domain.com. Android 7.0+ (PO and DO)

Wi-Fi Settings

The following table describes the wifi profile settings that you can configure on an Android device.
Policy setting Description Supported devices
Restrict edit or delete of profile If this setting is enabled, the users cannot alter or remove wifi settings that are configured by MaaS360®. Android 6.0+ (DO)
Restrict sharing Wi-Fi The admin can specify whether the users can share the admin-configured wifi networks. Android 13.0+ (PO and DO)