IntuneMAMUPN

String

-

iManage Work Mobility for Intune is supported on managed devices or can be configured as a Managed App within the Device Enrollment Type settings in Intune.

Include this application policy setting and set it to {{userprincipalname}} 

For more information, go to:

• https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-ios

• https://learn.microsoft.com/en-us/intune/intune-service/apps/app-protection-policies#device-management-types

IntuneMAMOID

String

-

Include this application policy setting and set it to {{userid}}

There must be no spaces after {{ or before }}

IntuneMAMDeviceID

String

-

Include this application policy setting and set it to: {{deviceID}}

There must be no spaces after {{ or before }}

version

Integer

2

Specifies the format version for configuration and is required. It must be set to 2.

open_in_receive

Boolean

true

Use this policy to restrict users from receiving document(s) in iManage Work Mobility from other applications.

• true: Users can import documents to iManage Work Mobility for Intune from other applications.  

• false: Prevents users from importing documents to iManage Work Mobility for Intune from other applications.

open_in_send

Boolean

true

Use this policy to prevent users from sending document(s) in iManage Work Mobility for Intune to other applications.

• true: Lets users send documents from iManage Work Mobility for Intune to other applications through the Open In feature of iOS.

• false: Documents can't be sent from iManage Work Mobility for Intune to other applications.

enable_native_
email

Boolean

true

Use this policy to prevent users from sending documents as email attachments from iManage Work Mobility for Intune through the native email (Mail app) application.

• true: Lets users send an iManage Work document as an email attachment using the iOS Mail app.

• false: Prevents users from sending an iManage Work document as an email attachment.

enable_airdrop

Boolean

true

Use this policy to prevent users from sharing documents in iManage Work Mobility for Intune using AirDrop. Apple's AirDrop feature enables the transfer of files between supported Macs and iOS devices without using mail or a mass storage device.

• true: Lets the user share the downloaded documents through AirDrop.

• false: Disables sharing the documents through AirDrop.

enable_printing

Boolean

true

Use this policy to prevent users from printing documents from iManage Work Mobility for iOS.

• true: Lets users to print downloaded documents through iOS AirPrint.

• false: Disables the printing of documents.

If your MDM policy configuration prevents emailing documents out of iManage Work Mobility for iOS, users can use Print Preview of a PDF as a workaround, as it can be distributed through the iOS Mail app. For more information, refer to Apple bug report 45524779.

enable_
downloading

Boolean

true

Use this policy to restrict users from downloading documents to their mobile devices from iManage Work Mobility.

• true: Documents may be downloaded to the device.

• false: Prevents bulk download of documents to the device.

enable_privacy_
curtain

Boolean

true

Privacy Curtain is a security feature that obscures the contents of iManage Work Mobility for Intune when the application isn't active.

This setting isn't applicable to iManage Work Mobility for Intune. To set this in Intune, access Client Apps > App Protection Policies > Properties > Access Requirements.

enable_touch_id_
for_passcode

Boolean

true

Lets users sign in to iManage Work Mobility for Intune through Touch ID or Face ID on their mobile device. 

This setting isn't applicable for iManage Work Mobility for Intune. To set this in Intune, access Client Apps > App Protection Policies > Properties > Access Requirements.

show_demo_
connection

Boolean

true

Controls the visibility of a public iManage Work demonstration environment, which can be used to test the iManage Work Mobility for iOS application before it's deployed in your environment.

• true: The Demo connection is displayed at the bottom of the servers list on the sign-in screen.

• false: The Demo connection isn't displayed.

number_of_
passcode_retries_
min_3_max_20_
default_10

Integer

10

The number of times the application passcode can be entered before all locally stored data is erased from the device (no data is impacted on the server).

This setting isn't applicable to iManage Work Mobility for Intune. To set this in Intune, access Client Apps > App Protection Policies > Properties > Access Requirements.

passcode_grace_
period_seconds_
min_10_max_
999999999_default_60

Integer

10

When switching away from the application, there's a time delay before the App Lock is enforced, requiring the user to enter the application passcode (or if configured, Touch ID). The minimum is 10 seconds and the maximum is 999999999 seconds (effectively requiring the user to enter the application passcode or use Touch ID only when the application starts or restarts).

This setting isn't applicable for iManage Work Mobility for Intune. To set this in Intune, access Client Apps > App Protection Policies > Properties > Access Requirements.

prevent_copy_to_clipboard

Boolean

false

Use this policy to prevent users from copying content in iManage Work Mobility for Intune, and pasting it into a clipboard or pasteboard. This policy configuration secures iManage Work data.

• false: This setting is the default, and it allows users to copy text from an iManage document to other applications.

• true: The clipboard or pasteboard in iManage Work Mobility for Intune is cleared when a user copies text from any document. This effectively stops copying any data from iManage Work Mobility for Intune as the user can't paste any text into other application(s).

view_mode

Boolean

false

Use this policy to offer users a View-Only experience in iManage Work Mobility.

Disabled (default): This allows the user to:

• Edit documents using an external application

• Drag documents to a folder

• Upload documents to a folder using the upload option

• File an email

• Auto upload

• Use Experimental Conversion to PDF Settings

• Annotate documents

Enabled: This setting prevents the user from performing the following activities:

• Open documents using an external application

• Drag documents to a folder

• Upload documents to a folder using the upload option

• File an email

• Auto upload

• Use Experimental Conversion to PDF Settings

• Annotate documents

When enabled, this setting supercedes the open_in_receive and enable_app_extensions settings. Even if they're enabled, the app won't honor the settings when view_mode is enabled. 

web_authentication_mode

Integer

For existing deployments, no default (not set).
allow_safari_for_login setting is used instead.

For new deployments, the default is 2 (ASWebAuthenticationSession).

Use this policy setting to control which web-based authentication controller (embedded browser) is used when users are prompted to sign in to iManage Work.

• 0 – WKWebView: Enables the legacy embedded web-based authentication controller, WKWebView.

Figure: Sign-in screen for WKWebView

• 1 – SFSafariViewController: Enables the Safari-based web-based authentication controller, SFSafariViewController.

Figure: Sign-in screen for SFSafariViewController

The primary difference to the user is the addition of the browser buttons at the top of the screen.

• 2 – ASWebAuthenticationSession: This is recommended by iManage. Enables Apple's latest ASWebAuthentication embedded web view controller for web-based authentication.

Figure: User confirmation prompt during initial sign-in - ASWebAuthenticationSession

Figure: Sign-in screen for ASWebAuthenticationSession

• 3 – Default browser: Rather than using an embedded web view or web view controller, the app switches to the iOS default browser, and when authentication is complete, the browser switches back to the Work 10 app.
  By default, the default browser is Safari, but the user can change this to any browser such as Edge or Chrome.

• 4 – Microsoft Edge browser (if installed): Similar to 3 above, but instead of loading the default browser, a specific URL for Microsoft Edge is used. If the user has specified a different default browser and authentication needs to be on Edge, use this setting.
  If Edge isn't installed, no sign-in screen is displayed and the user can’t sign in.

• 5 – Google Chrome browser (if installed): Similar to 3 above, but instead of loading the default browser, a specific URL for Google Chrome is used. If the user has specified a different default browser and authentication needs to be on Chrome, use this setting.
  If Chrome isn't installed, no sign-in screen is displayed and the user isn't able to sign in.

• 6 – AirWatch/VMware Workspace One browser (if installed): Similar to 3 above, but instead of loading the default browser, a specific URL for Workspace One is used. If the user has specified a different default browser and authentication needs to be on Workspace One, use this setting.
  If Workspace One isn't installed, no sign-in screen is displayed and the user isn't able to sign in.

When set, this web_authentication_mode policy setting replaces the allow_safari_for_login policy setting. 

For customers who have already deployed iManage Work Mobility:

• If the web_authentication_mode policy setting is blank or not set, iManage Work Mobility uses the value set for allow_safari_for_login instead.

For customers deploying iManage Work 10.20.2 or later for the first time:

• If both web_authentication_mode and allow_safari_for_login policy settings are blank or not set, iManage Work Mobility defaults to web_authentication_mode = 2 (ASWebAuthenticationSession).

allow_safari_for_
login

Boolean

true

Use this policy to prevent users from signing in to the application using Safari in iManage Work Mobility for Intune.

• true: This setting is the default. When users select Sign In on the Work Mobility application, they're directed to a new Safari window to sign in using their company credentials.

• false: When users select Sign In on the Work Mobility application, they're directed to an embedded web view window to sign in using their company credentials.

enable_analytics

Boolean

true

This policy controls whether a user will be prompted to opt in or out of sending analytics to iManage. It doesn't explicitly set up analytics on the app.

This option is enabled by default.

login_user_account_auth0_only

String

-

Allows you to optionally enter a user ID in the sign-in dialog. This applies only when Server Authentication is set to 0 - Standard/Explicit.

force_user_interaction_on_edit_in_place

Boolean

false

Use this policy to control how the app responds when a user saves edits back to iManage Work. This setting is available in iManage Work 10 Mobility version 10.23.4 and later.

false: The default setting. After editing a document opened from iManage Work, navigating back to the iManage Work Mobility app automatically saves the user's changes as a new version of the document. Additional edits to the open document are saved to the same version. When finished with their changes, the user must manually check in the file in iManage Work. 

true: After editing a document in iManage Work, navigating back to the iManage Work Mobility app prompts the user with the following dialog. This gives the user control over how they want to save their edits. 

• Save as New Version: Saves the edits as a new version of the document in iManage Work.

• Save & Sync: Saves the edits to the existing version of the document in iManage Work.

Figure: Unsaved document dialog

server0_uuid

String

-

A universally unique identifier to uniquely identify this entry. These can be generated by visiting https://www.uuidgenerator.net/version4.

Example: b985dc4b-3232-4719-9d1d-cf0162badc30

server0_name

String

-

The name that'll be displayed in the app in the list of available iManage Work connections.

server0_auth

Integer

-

The authentication type for the server. The valid values are:

0 - Standard: Supports both Work credentials and domain/username and password for explicit network authentication.

1 - ADFS (on-premises ADFS Server): Displays an embedded web view where the user must follow whatever authentication procedures the company has defined for the ADFS implementation.

2 - Common login: Provides single-sign-in for iManage Work 10 client applications. The login UI maintains information about the currently signed-in user in its session cookie.

3 - Use Oauth2 Refresh Token and Access Tokens: For more information, refer to Enable access request tokens. This option minimizes the number of times a user is prompted to sign in.

Username, password, and access tokens and refresh tokens are stored in the iOS Keychain.

server0_url

Text

-

The iManage Work URL for users to access iManage Work via this app.

• For iManage Work at cloudimanage.com, enter cloudimanage.com

• For imanage.work or on-premises, enter the Work Server URL that matches the SSL certification.