Configure Workspace ONE Content with application configuration values.
You can configure settings for your Workspace ONE Content using the configuration key and configuration value pairs provided by Workspace ONE UEM. Enter these configuration key value pairs either in the custom SDK Profile or the default SDK profile on the Workspace ONE UEM console.
Configure Settings using Default SDK Profile
Add the configuration keys in the default SDK profile to configure the settings for Workspace ONE Content.
- Navigate to Group & Settings > All Settings.
- From All Settings, navigate to Apps > Settings & Policies > Settings.
- Select Enable Custom Settings and paste the configuration keys as per your requirement.
- Select Save.
Configure Settings using Custom SDK Profile
- Navigate to Group & Settings > All Settings.
- From All Settings, navigate to Apps > Settings & Policies > rofiles > Custom Profile > Custom Settings.
- If you want to add a custom profile, navigate to Apps > Settings & Policies > Profiles > Add Profile > SDK Profile > iOS or Android > Custom Settings.
- From Custom Settings, select Configure and paste the configuration keys as per your requirement.
- Select Save.
Privacy Settings for Workspace ONE Content (iOS and Android)
Additional privacy disclosure and data collection practices can be performed by using certain configuration keys in the UEM console.
End users who are upgrading or are starting to use the latest version of Workspace ONE Content are presented with new privacy dialog screen upon the application launch.
The privacy dialog screen lets the user know the following information:
- Data collected by the app – Provides a summary of data that is collected and processed by the application. Some of this data is visible to administrators of the Workspace ONE UEM administration console.
- Device Permissions – Provides a summary of device permissions requested for the app to enable product features and functionality, such as push notifications to the device.
- Company's privacy policy – By default, a message is displayed to the user to contact their employer for more information. You can configure the privacy policy URL in the UEM console. Once configured, the user can access the employer’s privacy policy from the app.
Use the following configuration keys to enable privacy notice and data sharing settings in Workspace ONE Content:
| Configuration Key | Value Type | Supported Values | Description |
|---|---|---|---|
| { "DisplayPrivacyDialog" } | Integer | 0 = disabled 1 = enabled (default) | When set to '1' (enabled), Workspace ONE Content displays a privacy notice to the users about the data that is collected and the permissions that are required on the device for the optimal functioning of the app. |
| { "PolicyAllowFeatureAnalytics" } | Integer | 0 = disabled 1 = enabled (default) | When set to '1' (enabled), Workspace ONE Content displays a notice to the users about the option to opt-in to anonymous feature usage analytics that helps to improve product functionality and invent new product capabilities. When set to '0', the data sharing notice is not displayed and no data is collected from the device to optimize the app experience. |
| { "PolicyAllowCrashReporting" } | Boolean | True = enabled False = disabled | When set to True, app crashes are reported back to the application. |
| { "PrivacyPolicyLink" } | String | "https://www.url.com" | Provide the Policy URL that you want your users to visit when Your company's privacy policy is selected from the Privacy notice. |
PDF Autosave in Workspace ONE Content (iOS Only)
From Workspace ONE Content v4.13.2, the device users can enable or disable the PDF Autosave functionality by using the Enable PDF Autosave setting in the Workspace ONE Content app.
The PDF Autosave setting is disabled by default. The PDF Autosave function can be set to 30 seconds, 60 seconds, and 120 seconds respectively using the Autosave time in seconds setting in the Workspace ONE Content. The administrators can use the configuration key provided by Workspace ONE UEM in the Workspace ONE UEM console to force enable the PDF Autosave functionality in Workspace ONE Content. When enabled using the configuration key, the device users cannot disable the PDF Autosave function and the Enable PDF Autosave setting is unavailable in the Workspace ONE Content. When the PDF Autosave function is enabled, the changes made to a PDF file when an autosave is in progress are not saved. After every instance of an autosave, the PDF document is reloaded.
Use the following configuration key to enable PDF Autosave function is Workspace ONE Content:
| Configuration Key | Value Type | Supported Values | Description |
|---|---|---|---|
| { "ContentPDFAutoSaveEnabled" } | Boolean | true = enabled false = can be enabled or disabled by the device user | When set to True, the PDF Autosave functionality is enabled and the device users cannot disable the setting. The Enable PDF Autosave setting in the Workspace ONE Content is unavailable to the device users. |
Remove links on PDF (iOS Only)
Use the following configuration key to block the ability to remove a link from a PDF.
| Configuration Key | Value Type | Supported Values | Description |
|---|---|---|---|
| { "DisableRemoveLink" } | Boolean | False (Default Value) True | When set to True, the key blocks the ability to remove a link from a PDF. |
Screen Timeout Restriction for Workspace ONE Content (iOS Only)
You can restrict the device users from disabling the screen timeout in Workspace ONE Content app by using certain configuration keys in the Workspace ONE UEM console.
| Configuration Keys | Value Type | Supported Values | Description |
|---|---|---|---|
| { "PolicyAllowScreenTimeoutToggle"} | Boolean | True (default) = Enabled False = Disabled | Set to True or False to control the timeout setting in Content app. If a value is not set, the default setting is applied and users can switch the timeout setting.When set to false, users are not allowed to toggle the timeout setting. |
Modern Authentication using WKWebView (iOS Only)
For security purpose, you can add a configuration key to prevent modern authentication flows on Safari and allow authentication flows using WKWebView instead of SFSafariViewController. This key, when used, allows Modern Authentication without allowlisting Safari.
Note: Basic authentication is supported for OAuth repositories such as One Drive, Google Drive, Box, Sharepoint O365, and One Drive for Business.
| Configuration Key | Value Type | Supported Values | Description |
|---|---|---|---|
| { "AccountUseWebviewForOauth"} | Boolean | TRUE = Enabled FALSE = Disabled (default) | When set to True, the oauth flow is presented using a WKWebView instead of SFSafariViewController. |
Auto Sync Control for Repositories (Android Only)
Add a configuration key in the default or the custom SDK profile to control the auto sync and authentication check for repositories that are not of managed content repository type.
| Configuration Key | Value Type | Supported Values | Description |
|---|---|---|---|
| { "AutoSyncEnabled"} | Boolean | TRUE (default) = Enabled FALSE = Disabled | When set to False, auto sync and authentication check for repository occurs only when the user navigates into the repository. When the default value is applied, sync and authentication check takes place when an automatic or manual sync is performed. |
Screen Record during Remote Support (Android Only)
You might require screenshots or screen records of the user's Content application while assisting the user in troubleshooting any issue during a remote support session. However, if a DLP restriction is set for the application that does not allow screen record, you cannot perform a screen capture.
To override the DLP restriction and allow screen record, add the following configuration key to the default or custom SDK profile on the Workspace ONE UEM console.
| Configuration Key | Value Type | Supported Values | Description |
|---|---|---|---|
| { "AllowScreenRecord"} | Boolean | TRUE = Enabled FALSE = Disabled (default) | When set to True, screen record is allowed. When set to false, screen record is restricted. |
Workspace ONE Send Support for Content
By integrating Workspace ONE Send with Workspace ONE Content, you can restrict the files in Workspace ONE Content to open only through Workspace ONE Send. To force open the files through Send app, add a configuration key in the UEM console.
Use the following configuration key to restrict files to open through Workspace ONE Send.
| Configuration Key | Value Type | Supported Values | Description |
|---|---|---|---|
| { "PolicyAllowAIPFilesToOpenInOffice"} | Boolean | True = Enabled False = Disabled | When set to True, the files open through Workspace ONE Send. |
Staged Content Support for Multi-User Devices
Add a configuration key in the default or custom SDK profile to enable the staged content mode for multi-user devices. By enabling the staged content mode on multi-user devices, you can prevent the loss of content between the device check-in and check-out sessions.
| Configuration Key | Value Type | Supported Types | Description |
|---|---|---|---|
| { "RetainContentBetweenCheckoutSessions": true } | Boolean | True = Enabled False (default) = Disabled | When set to true, the downloaded content is retained and not cleared during the device check-in and checkout sessions. When set to false, the downloaded content is cleared and not retained during the device check-in and checkout sessions. |
For more information about the staged content support, see Enable Staged Content Mode for Multi-User Devices.
Support Content MIME (iOS only)
The Content MIME type header is added to Network requests to track security when content is shared within the organisation. To support the Content MIME type, use the following key.
| Configuration Key | Value Type | Supported Values | Description |
|---|---|---|---|
| {"AddContentMimeTypeForNetworkRequests": True} | Boolean | True = Enabled False = Deactivated (default) | When set to True, the Accept Header and Content-Type headers are updated to MIME type. |
Activate Full Name in Content
Use the following key to display the full names of Repository, Category or Folder, and File in List view. There is no restriction on the length of the names.
| Configuration Key | Value Type | Supported Values | Description |
|---|---|---|---|
| {"PolicyDisplayFullName": True} | Boolean | True = Enabled False = Deactivated (default) | Set the value to true to display the full name of Repository, Category or Folder, and File in List view. |
iPad users must enable Expanded mode in Display options under App Settings to use this feature. Or else, as an administrator, you can use the following key to display in Expanded mode by default.
| Configuration Key | Value Type | Supported Values | Description |
|---|---|---|---|
| {"EnableExpandedContentLayout": True} | Boolean | True = Enabled False = Deactivated (Default) | Set the value to true to enable the Expanded mode under display options. |
Note: This feature is only applicable when the view is in List mode and not in grid mode.
Optimize Synch Cache (iOS only)
When updating files, if you notice that they disappear from the Content app, you can prevent this behaviour by configuring the following key.
| Configuration Key | Value Type | Supported Types | Description |
|---|---|---|---|
| { "PolicyUseOptimizedSync": false} | Boolean | True = Enabled False (default) = Deactivated | Set the key value to False to deactivate the Optimised Sync. |
Deactivate the Edit PDF Pages Options
You can restrict your users from adding, duplicating, deleting, or rearranging pages by deactivating the Edit PDF Pages options. To do so, deactivate the following key:
| Configuration Key | Value Type | Supported Types | Description |
|---|---|---|---|
| { "PolicyAllowOrganizePDFPage": true} | Boolean | True = Enabled (default) False = Deactivated | When set to False, users cannot access the Edit PDF page option to add, duplicate, delete, or reorganise pages. |
Cette page vous a-t-elle été utile ?