Android app directory · Productivity
Salesforce documents five MDM keys for Android in its guide to using MDM with Mobile SDK apps, set as key-value pairs through your MDM suite. They cover which login hosts people see and whether they can change them, and certificate-based sign-in using a certificate already installed on the device. Salesforce says to work with your MDM provider, so the exact setup steps and the shape of the JSON depend on that provider.
Nomidcom.salesforce.chatter Common setups
Copy a setup into the managed configuration of a policy, then adjust the values. Each one uses only keys explained below.
Give testers both hosts with clear labels and prevent anyone from adding a different host.
{
"AppServiceHosts": [
"https://example.my.salesforce.com",
"https://example--uat.sandbox.my.salesforce.com"
],
"AppServiceHostLabels": [
"Production",
"UAT sandbox"
],
"OnlyShowAuthorizedHosts": true
}Turn on certificate sign-in and tell the app which of the installed certificates to use. Deploy the certificate with your EMM first.
{
"RequireCertAuth": true,
"ManagedAppCertAlias": "salesforce-user-cert"
}One production host, no editing and certificate sign-in, for devices that only ever talk to your org.
{
"AppServiceHosts": [
"https://example.my.salesforce.com"
],
"AppServiceHostLabels": [
"Production"
],
"OnlyShowAuthorizedHosts": true,
"RequireCertAuth": true,
"ManagedAppCertAlias": "salesforce-user-cert"
}Managed configuration
Key names and value types come from the vendor’s documentation. The explanations are written by Nomid.
| Key | Type | What it does | Example |
|---|---|---|---|
| Login hosts | |||
AppServiceHosts | Login host addresses (https:// required on Android) | Pushes one or more login hosts, such as a My Domain or a sandbox. The first entry is the default. It spares people from typing long addresses. | ["https://example.my.salesforce.com", "https://example--uat.sandbox.my.salesforce.com"] |
AppServiceHostLabels | Labels, one per host | Gives each host a readable name in the picker. The number of labels must equal the number of hosts. | ["Production", "UAT sandbox"] |
OnlyShowAuthorizedHosts | On or off | When true, people cannot edit the host list, so the app can only connect to the hosts you pushed. | true |
| Certificate-based sign-in | |||
RequireCertAuth | On or off | Starts the certificate sign-in flow. On Android the app uses the user certificate on the device inside a web view. Android 5.0 or later. | true |
ManagedAppCertAlias | Certificate alias | Names the certificate deployed to the device that the app should pick for sign-in. Salesforce says it is required on Android when certificate sign-in is on. | salesforce-user-cert |
Deploy with Nomid
Find it on Google Play from the policy’s apps list and choose how it is installed.
In the policy, set the app’s managed configuration with the keys and values from this page.
Devices in the policy receive Salesforce and its configuration on their next sync.
Questions
Salesforce's MDM guide does not state the package name. This page uses com.salesforce.chatter for the Salesforce app on Android, so confirm it in your MDM's managed Google Play catalog before you target a policy.
Salesforce lists Android 5.0 as the minimum for certificate-based authentication.
Salesforce publishes them in its guide to using MDM with Mobile SDK apps, and its key descriptions refer to the Salesforce mobile app. Check with Salesforce if you rely on the keys for a branded or custom-built app.
Salesforce lists AppServiceHosts and AppServiceHostLabels as a string or a string array, and the two lists must have the same number of entries. Salesforce tells you to contact your MDM provider to configure the settings, so check how your provider enters lists.
Add the app to a Nomid policy, set its configuration and choose its permissions.
