There are some additional iOS and Android configurations that are optional but can be applied to both iOS and Android devices. Each configuation has their own specific requirements and will also require that you deploy the Omnissa Workspace ONE Tunnel app to devices using Application Configurations during device assignment.
Application configurations are key-value pairs that you deploy with the application to preconfigure features for users. The table below shows many of the application configurations that are available for Android and iOS.
Key-Value Pairs
| Key Name & Type | Configuration Value | Description | Version Added & Mode |
|---|---|---|---|
| Privacy Controls: | |||
|
Friendly Key: Custom Privacy Policy URL
Configuration Key: PrivacyPolicyLink
Value Type: String |
Example: https://www.acme.com | Provide the Policy URL that you want your users to visit when Your company's privacy policy is selected from the Privacy notice. | 4.2 Standalone Mode Supported |
|
Friendly Key: Display Privacy Dialog Box
Configuration Key: DisplayPrivacyDialog
Value Type: Boolean |
True - Enable
False - Disable | When set to '1' (Enable), Omnissa Workspace ONE Tunnel displays a privacy notice to the users about the data that is collected and the permissions that are required on the device for the optimal functioning of the app. | 4.2 Standalone Mode NOT Supported |
|
Friendly Key: Crash Reporting
Configuration Key: PolicyAllowCrashReporting
Value Type: Boolean |
True - Enable
False - Disable | Set to True to report Workspace ONE Tunnel crashes. | 4.2 Standalone Mode Supported |
|
Friendly Key: Toggle VPN Connection
Configuration Key: EnableToggleVPN
Value Type: Boolean |
True - Enable
False - Disable (Default) | Set to True to provide users the option to connect/ disconnect the Tunnel Connection on demand. | 22.03 Standalone Mode Supported by Default |
|
Friendly Key: Toggle Timeout
Configuration Key: ToggleVPNTimeout
Value Type: Integer |
Time in minutes
Default Value = 0 (No timeout) | Set a timeout in minutes for an Active Tunnel connection. | 22.03 Standalone Mode NOT Supported |
| Diagnostics and Troubleshooting: | |||
|
Friendly Key: Feature Analytics
Configuration Key: PolicyAllowFeatureAnalytics
Value Type: Integer |
1 - Enable
0 - Disable | Set to True to enable data collection for Workspace ONE Tunnel experience improvement. | 4.2 Standalone Mode Supported |
|
Friendly Key: Display Welcome Screen
Configuration Key: DisplayWelcomeScreen
Value Type: Boolean |
True - Enable
False - Disable | Set to True to hide the Workspace ONE Tunnel welcome screen. | 4.2 Standalone Mode NOT Supported |
|
Friendly Key: Filter Diagnostics View
Configuration Key: FilterDiagnosticsView
Value Type: Boolean |
True - Enable
False - Disable | Set to True to filter advanced connection details in the Diagnostics view. | 5.6 Standalone Mode Supported |
|
Friendly Key: Enable Debug Logs on Install
Configuration Key: EnableDebugLogsOnInstall
Value Type: Integer |
0 – Disable
1 – Enable 2 – Force Enable | This setting is strictly for debugging. | 21.01 Standalone Mode Supported |
|
Friendly Key: Enable App Activity (Beta)
Configuration Key: ShowDataUsage
Value Type: Boolean |
True - Enable
False - Disable | Set to True to enable details for applications that have recently sent a network request in the UI. | 21.01 Standalone Mode Supported |
| Container Wide/ Full Device Mode: | |||
|
Friendly Key: Exempt Application from Container-wide Tunnel
Configuration Key: DisallowAppsList
Value Type: String | Example: {com.facebook.orca,com.whatsapp} | Provide a list of applications that are exempt from Full Device Tunnel. | 22.03 Standalone Mode NOT Supported |
| Other Settings: | |||
|
Friendly Key: Custom Settings
Configuration Key: CustomSettings
Value Type: String |
Example 1: :
Example 2:: Action - Tunnel
| Custom Settings for Tunnel | 5.1 Standalone Mode Supported |
|
Friendly Key: Trusted Network Probe Url
Configuration Key: TrustedNetworkProbeUrl
Value Type: String |
| You can use this attribute to detect if your device is connected to a trusted network, based on your device's ability to reach a private URL. You can specify a comma-separated list for redundancy. | 5.6 Standalone Mode Supported |
|
Friendly Key: UEM API Sync Interval
Configuration Key: ClientSyncInterval
Value Type: String | Time in minutes. Minimum value recommended is 60 minutes. Default value is 240 minutes. | Determines sync interval with UEM API for Tunnel configuration updates. This is part of the new DTR sync mechanism. | 22.03 Standalone Mode Supported |
| Battery Optimization: | |||
DisplayBatteryOptimizationScreen | Default Value: True | Display or hide Battery Optimization Screen | 24.05 Standalone Mode Supported |
DisplayBatteryOptimizationNotification | Default Value: False | Display or hide Battery Optimization Notification | 24.05 Standalone Mode Supported |
| Miscellaneous: | |||
| MfaAuthorizedApps | {com.acme.app1, com.acme.app2} | List of applications that are enabled to interact with Tunnel MFA broadcasts | 23.09 Standalone Mode NOT Supported |
ProxyConnectByHostname | Default Value: False |
When set to True, the client will utilize the resolved DNS hostname as opposed to IP address when using Device Traffic Rules PROXY action. | 23.06 Standalone Mode Supported |
You must know the supported key-value pairs for your application to deploy them and to code them. To find other supported application configurations, review the listed resources. You can enter supported pairs when you upload applications to the Workspace ONE UEM console and you can code them into your applications.
The application vendor sets the supported configurations for the application, so you can contact the vendor or visit other sites with information about application configurations.
-
To find the supported application configurations, contact the application vendor.
-
See these resources with information about application configurations.
- AppConfig Community at https://www.appconfig.org/
See Workspace ONE UEM Managed App Configurations at https://kb.omnissa.com/s/article/2960754?lang=en_US.
Privacy Dialog
Workspace ONE Tunnel supports a privacy dialog that displays information regarding the application an admin configures. Tunnel only supports the privacy dialog for iOS and Android devices. You must deploy the Tunnel app to devices using Application Configurations during device assignment.
The dialog displays the following information to end users:
Privacy Dialog Information
| Information | Description |
|---|---|
| Data collected by the application | Provides a summary of data which is collected and processed by the application. Some of this data will be visible to administrators of the Workspace ONE UEM console. |
| Device permissions | Provides a summary of device permissions requested for the app to enable product features and functionality, such as push notifications to the device. |
| Company's privacy policy | Enables administrators to display a customized privacy notice to their users through a configurable URL. If no privacy notice is provided, a default message will be shown to the user to contact their employer for more information. |
Configure Public Apps to Use Per App Profile
After you create a per app tunnel profile you can assign it to specific apps in the application configuration screen. This tells that application to use the defined VPN profile when establishing connections.
-
Go to RESOURCES > Apps > Native Apps.
-
Click the Public tab.
-
Click ADD APPLICATION to add an app or edit an existing app.
Note: For iOS apps, only public or internal apps built with the Cocoa Framework are supported.
-
On the Deployment tab, select Use VPN and then select the profile you created.
-
Click SAVE AND ASSIGN and publish your changes.
Configure Internal Apps to Use Per App Profile
After you create a per app tunnel profile you can assign it to specific apps in the application configuration screen. This tells that application to use the defined VPN profile when establishing connections.
-
Go to RESOURCES > Apps > Native Apps.
-
Click the Internal tab.
-
Click ADD APPLICATION to add an app.
Note: For iOS apps, only public or internal apps built with the Cocoa Framework are supported.
-
Click SAVE AND ASSIGN to move to the Assignment page.
-
Click Add Assignment and select Per-App VPN Profile in the Advanced section.
-
Save & Publish the app.
Was this page helpful?