Android app directory · Communication

Zoom Workplace managed configuration for Android

Zoom publishes a long list of settings that IT can push to its Android app through an MDM. This page covers about thirty of them: enrolling the device, choosing how people sign in, controlling who can join meetings, and limiting features or data leaving the app. Zoom's documentation lists many more, so check it for the full set. Zoom writes most key names with a mandatory: or mandatory:choice: prefix, and this page keeps them exactly as printed.

Package name us.zoom.videomeetings

Deploy Zoom Workplace with Nomid Book a demo

Developer: Zoom Communications, Inc.
Keys on this page: 32 documented
Works on: Fully managed, Work profile
Last checked: 2026-11-03

Common setups

Common Zoom Workplace setups

Copy a setup into the managed configuration of a policy, then adjust the values. Each one uses only keys explained below.

Company SSO only

Remove the email, Google, Facebook, Microsoft and Apple sign-in options, make SSO the default and lock the company address. People sign in with their work account and cannot create a new one.

{
  "mandatory:choice:DisableLoginWithEmail": true,
  "mandatory:choice:DisableGoogleLogin": true,
  "mandatory:choice:DisableFacebookLogin": true,
  "mandatory:choice:DisableLoginWithMicrosoft": true,
  "mandatory:choice:EnableAppleLogin": false,
  "mandatory:choice:DisableUserSignUp": true,
  "mandatory:choice:ForceLoginWithSSO": true,
  "mandatory:ForceSSOURL": "hooli"
}

Only signed-in people can join

Stop guests from dropping into meetings from a company device. People must be signed in to the app before they join.

{
  "mandatory:choice:EnforceSignInToJoin": true,
  "mandatory:choice:EnforceAppSignInToJoin": true,
  "mandatory:choice:EnforceSignInToJoinForWebinar": true
}

Keep company data in the app

Block screenshots, screen sharing, chat file transfers and cloud recording, and ask for biometric unlock. Suited to devices that handle confidential meetings.

{
  "DisableScreenshot": true,
  "mandatory:choice:DisableShareScreen": true,
  "DisableIMFileTransfer": true,
  "mandatory:choice:DisableCloudRecording": true,
  "RequireBiometricAuthentication": true
}

Managed configuration

Zoom Workplace managed configuration keys

Key names and value types come from the vendor’s documentation. The explanations are written by Nomid.

Key	Type	What it does	Example
Enrollment and device management
`mandatory:SetEnrollToken4CloudMDM`	Token from the Zoom web portal	Enrolls the device in Zoom Device Management, so Zoom's own portal can manage it alongside your MDM.	`token-from-portal`
`mandatory:EnrollDeviceType`	Text: smartphone, or empty	Set to smartphone to let the device list and sign in with accounts from small and medium organizations. Leave empty for the default.	`smartphone`
`mandatory:SetDevicePolicyToken`	Token from Device Policy Management	Turns on internal meeting authentication using a token from Zoom's device policy tool.	`token-from-portal`
`mandatory:choice:EnableAutoUploadDumps`	On or off (true or false)	Sends crash dump files to Zoom automatically so problems can be diagnosed.	`false`
Sign-in methods and SSO
`mandatory:choice:DisableLoginWithEmail`	On or off (true or false)	Hides the email and password sign-in option.	`true`
`mandatory:choice:DisableGoogleLogin`	On or off (true or false)	Hides the Google sign-in option.	`true`
`mandatory:choice:DisableFacebookLogin`	On or off (true or false)	Hides the Facebook sign-in option.	`true`
`mandatory:choice:DisableLoginWithMicrosoft`	On or off (true or false)	Hides the Microsoft sign-in option.	`true`
`mandatory:choice:EnableAppleLogin`	On or off (true or false)	Allows the Apple sign-in option. Set it to false to leave that option out.	`false`
`mandatory:choice:DisableLoginWithSSO`	On or off (true or false)	Hides the SSO sign-in option. Use it only if you do not rely on single sign-on.	`false`
`mandatory:choice:ForceLoginWithSSO`	On or off (true or false)	Makes SSO the default way to sign in.	`true`
`mandatory:SetSSOURL`	Company SSO subdomain	Presets the SSO address with your company's Zoom subdomain. People can still change it.	`hooli`
`mandatory:ForceSSOURL`	Company SSO subdomain	Sets the SSO address and locks it, so people cannot type another one.	`hooli`
`mandatory:choice:EnforceLoginWithMicrosoft`	On or off (true or false)	Requires Microsoft authentication to sign in.	`false`
`mandatory:choice:DisableUserSignUp`	On or off (true or false)	Removes the Sign Up option from the launch screen so people cannot create their own account.	`true`
`mandatory:choice:DisableKeepSignedInWithSSO`	On or off (true or false)	Asks for a fresh SSO sign-in each time the app starts.	`true`
`mandatory:SetEmailDomainsRestrictedToLogin`	Domains separated by &	Allows sign-in only for accounts whose email uses the listed domains.	`example.com&example.org`
Meeting access
`mandatory:choice:EnforceSignInToJoin`	On or off (true or false)	Requires people to authenticate before they join a meeting.	`true`
`mandatory:choice:EnforceAppSignInToJoin`	On or off (true or false)	Requires people to be signed in to the app before they join any meeting.	`true`
`mandatory:choice:EnforceSignInToJoinForWebinar`	On or off (true or false)	Requires authentication before joining a webinar.	`true`
`mandatory:SetAccountIDsRestrictedToJoin`	Account IDs	Limits joining to meetings hosted by the listed Zoom accounts.	`AbC123xyz`
`mandatory:choice:EnableAutoCopyConfInvitationURL`	On or off (true or false)	Copies the invite link automatically when someone creates a meeting.	`false`
Features and data leaving the app
`mandatory:choice:DisableMeetingChat`	On or off (true or false)	Turns off chat inside meetings.	`true`
`mandatory:choice:DisableShareScreen`	On or off (true or false)	Blocks sharing this device's screen. Seeing other people's shares still works.	`true`
`mandatory:choice:DisableCloudRecording`	On or off (true or false)	Turns off cloud recording.	`true`
`mandatory:choice:DisableVirtualBkgnd`	On or off (true or false)	Turns off virtual backgrounds.	`true`
`mandatory:choice:DisableVideoCamera`	On or off (true or false)	Blocks sending video from the device camera.	`true`
`mandatory:choice:TurnOffVideoCameraOnJoin`	On or off (true or false)	Starts every meeting with the camera off.	`true`
`DisableScreenshot`	On or off (true or false)	Blocks screenshots of the app and sharing the app from the device.	`true`
`DisableIMFileTransfer`	On or off (true or false)	Blocks sending files in chat, except to the domains named in AllowedIMFileTransferDomain.	`true`
`AllowedIMFileTransferDomain`	Domains separated by &	Lists the domains that may still receive chat files when file transfer is blocked.	`example.com`
`RequireBiometricAuthentication`	On or off (true or false)	Asks for fingerprint or face unlock before the app opens.	`true`

Deploy with Nomid

Roll Zoom Workplace out in three steps

Step 1Add Zoom Workplace to a policy
Find it on Google Play from the policy’s apps list and choose how it is installed.
Step 2Set its managed configuration
In the policy, set the app’s managed configuration with the keys and values from this page.
Step 3Assign the policy
Devices in the policy receive Zoom Workplace and its configuration on their next sync.

Questions

Zoom Workplace on managed Android

What is Zoom Workplace's package name on Android?

us.zoom.videomeetings. It is the id in Zoom's own Google Play link. Zoom also ships a separate build for Microsoft Intune, so make sure you add the one that matches your setup.

Why do the key names start with mandatory:?

That is how Zoom writes them in its deployment article. Where an MDM console shows a key field, enter the name as printed there, including the prefix.

What values do the on or off keys take?

Zoom's Android article lists them as true or false. Its Intune guide for app protection policies says to use 1 and 0 instead, so follow the guide that matches how you deploy.

Can I set a company SSO address people cannot change?

Yes. Use mandatory:ForceSSOURL with your company subdomain. mandatory:SetSSOURL only presets the address and leaves it editable.

Manage Zoom Workplace on your fleet

Add the app to a Nomid policy, set its configuration and choose its permissions.

Start free Book a demo