LATEST – December 2021

KACE Cloud Mobile Device Manager

We are excited to announce our most recent updates to KACE Cloud Mobile Device Manager.

December 2021

In our December release, we are introducing the following features, and a number of resolved issues.

New features

• Scheduled policies: Starting in this release, you can add schedules to a policy to activate it at specified times. This is useful for the policies that you want to enable periodically. By default, all policies are enabled at all times. Each policy must have at least one active period per week.

  Some actions (primarily Android app installations) are completed outside of the control of KACE Cloud MDM. These are only initiated during the available schedule window, however if the device is unavailable when the associated policy initiates the action, the action is completed outside the associated schedule. This type of action is different than those associated with other entities, such as iOS or Windows apps, Wi-Fi, or VPN configurations.

  Communication with associated devices only occurs during the policy's active periods in the time zone reported by each device. You can override the time zone for selected devices, as required.

• Silent authentication for Android devices: KACE Cloud MDM now allows you to enroll Samsung Knox and Android Zero Touch devices without creating login accounts for your end users. The silent authentication uses a certificate that you generate in KACE Cloud MDM to sign the initial enrollment request. KACE Cloud MDM verifies the following information in the signature before proceeding with the enrollment:
  • A valid certificate from KACE Cloud MDM is used to sign the request.
  • The certificate used to sign the request has not expired.
  • The certificate used to sign the request matches the one stored in the customer's database as their Android Identity certificate.
• Automating user provisioning: You can now automate the exchange user accounts between different identity domains using the System for Cross-domain Identity Management (SCIM) protocol. You can use this feature to easily pull their user information from any identity provider that supports the SCIM protocol into KACE Cloud MDM. For example, you can easily sync your users from Microsoft Azure AD or Okta. This process quickly pre-populates KACE Cloud MDM with the information from your user database, before those users have a chance to log in to KACE Cloud MDM, in order to configure policies associated with their devices, as needed.

The SCIM User Provisioning page enables system administrators to create one or more SCIM configurations and define the required properties used by the associated external provider such as MS Azure AD. The system administrator can also define which user attribute data to import from the SCIM provider by creating mappings between SCIM user schema attributes and KACE Cloud MDM user attributes. Any information synced this way from an identity provider appears as read-only in KACE Cloud MDM and cannot be modified.

For more information, visit the KACE Cloud MDM Help Center, where you can also find the full set of Release Notes, which includes the most recent list of resolved issues.

Be sure to check out the KACE Cloud MDM Product Support Page to find knowledge base articles, notifications, video tutorials, and a product user forum.