Key-value pairs to configure app behavior





Select one of the following:





Enter a valid email address.

Automatically populates the email address when the device user emails the device logs.





Blocks device users from adding the content site to Ivanti Docs@Work:

Enter the values as a semicolon (;) separated list.

Example: Box;Dropbox;CIFS

Microsoft SharePoint includes Office 365 SharePoint sites.





Blocks device users from adding sites to Ivanti Docs@Work.

User added sites will be removed. Documents from user sites marked as Starred, Offline, or in Recents will be removed.





Connector type: Number of sites that are allowed.

For example: SharePoint:2, Box:1

Restricts the number of User sites that a device user can add. If a site type is not configured, there are no restrictions on the number of User sites for that site type.

Restricting number of User sites has no impact on blocked sites. This key-value pair only applies to allowed sites. The configuration is ignored if DISABLE_USER_SITES is true.

Enter the following value:

Site type1:number; Site type2:number.

Valid entries for site type are: SharePoint, Box, Dropbox, WebDAV, CIFS.

Number is a positive integer greater than 0.

In this example, the device user will be able to add up to two SharePoint sites, and only one Box site. There are no restrictions on any other type site.





Disables the following in My Files and all content sites in Ivanti Docs@Work:





Where n is a number 1-100

Example:

SITE_DETAILS_1

Enter parameters for the content site in the following JSON format:

{"name":"name for the site","url":"valid url for the content repository including port","domain":"SharePoint", "subDomain":"Federated","priority":“true | false”, "webView":“true | false”}

Example to add a SharePoint :

{"name":"SharePoint Group","domain":"SharePoint","url":"https://SharePoint.com"}

Example to add a Box Site:

{"name":"Box1","domain":"BoxEnterprise","url":"https://www.box.com"}

Required parameters:

“name”, “url”, “domain”, “subDomain”

Adding a SharePoint Group site with Federated authentication

name for the site: The name is displayed in the Ivanti Docs@Work app.

valid url for the content repository including port: The URL must start with http:// or https://. Both domain name and IP address are supported.

If priority is not defined, the default setting is false. "priority":"false" identifies the content site as a Group site. Configuring “priority”:“true” identifies the site as a Published site. You can configure a site as a Published site only if “subDomain” is also configured.

If "webView":"true", the SharePoint documents can be opened in Microsoft’s online web viewer and editor. The site is automatically a Group site. It cannot be configured as a Published site.

Pushing Enterprise Box Site from Ivanti EPMM.

Example:

{"name":"SharePoint","url":"https:// sharepoint.acme.com","domain":"SharePoint","subDomain":"Federated","priority":"false"}





Automatically populates the user name for the content site.

Enter parameters for the content site in the following JSON format:

{"URL":{"domainType":"DomainType","userName":"$USERID$","password":"$PASSWORD$"},"default":"Domain/$USERID$"}

For JSON format:

URL: Enter the URL for the content site. Include the protocol. Example: http, https.

Domain Type: Enter one of the following: SharePoint, WebDAV, Box, BoxEnterprise, CIFS.

Domain: Enter the domain name to which the username defaults if the username for the URL cannot be resolved. Variables are not supported.

password: The user is logged in automatically when the user navigates to the site from the Sites screen. This feature is applicable for CIFS and WebDAV sites only on Ivanti EPMM.

$PASSWORD$ value is available only when admin enables "Save User Password" option on the device registration settings on Ivanti EPMM and user is registered to Mobile@Work Client. For more information, Ivanti EPMM documentation for its usage. The $PASSWORD$ option is not available for Ivanti EPMM.

Examples:

Copying and pasting JSON strings might result in invalid JSON. Ivanti recommends that you validate the JSON string before using it. There are validator tools such as JSONLint (jsonlint.com) that will help validate the JSON string.





Allows users to tap on a URL starting with http:// and view the site in a browser. If the key-value pair is not configured, users will not be able to view an http link in a browser.

If the key-value pair is not configured, http:// links are not opened in any browser.

Ivanti recommends that both HTTP_PREFIX and HTTPS_PREFIX are configured. If only one URL scheme is configured, the unconfigured URL scheme will not be opened in any browser, thus impacting user experience.

Allows users to tap on a URL starting with https:// and view the site in a browser. If the key-value pair is not configured, users will not be able to view an https link in a browser.

If the key-value pair is not configured, https:// links are not opened in any browser.

Ivanti recommends that both HTTP_PREFIX and HTTPS_PREFIX are configured. If only one URL scheme is configured, the unconfigured URL scheme will not be opened in any browser, thus impacting user experience.





Changes the NoAuthn label to Corporate single sign-on (SSO) in Ivanti Docs@Work. The NoAuthn option is seen in the Authentication settings for SharePoint sites in Ivanti Docs@Work. There is no functional change.





Makes the Share option available for PDF documents.





Use this key-value pair to set the Ivanti Docs@Work embedded viewer as default instead of iOS Native viewer.





Makes the Share option available for Microsoft Office documents in Polaris editor, regardless of whether Copy/Paste is enabled in AppConnect policy.

This key-value pair is case sensitive.





Use this key-value pair if the SharePoint server is not set up to use persistent authentication cookies and users encounter issues with opening WebView for SharePoint sites.

This key-value pair is case sensitive.







To open Ivanti Email+, use:

email+launcher://docsatwork?url=mailto:

To open IBM verse, use

ibmverse://com.ibm.lotus.traveler/mailto?to=

To open SecurePIM, use

spmailto:

Brings up the email client for which the schema is configured in mailto_prefix.

Use this key-value pair to open the email client for which the schema is configured in mailto_prefix.

Support for third party email client enabled.





Use these key value pairs to enable the Certificate Based Authentication. Where "n" can be any number.

For example:

cert_hostname such as (defender.stutz.qa.domain.com) SharePoint can be configure as "*defender*"

client-scep using authentication type.

This key-value pair is case sensitive.





Support for private certs in id_Certificate_<n> if the root cert(s) is provided with the kvp known_ca_<n><m>.





Displays user friendly title for files and folders in SharePoint.

Use the following values to set the key-value pair:

The default value is set to false.





Use the following values to set the key-value pair:

If the key-value pair is not defined in the configuration, allow_analytics is set to true by default.





Use a user identifying variables a values such as, $USERID$ and $EMAIL$.

Displays a diagonal watermark text (provided by the administrator) over all the documents viewed or edited using Ivanti Docs@Work.





Use this key-value pair to enable the Ivanti Docs@Work document sharing feature. Multiple file sharing from same folder is enabled in Ivanti Docs@Work using extension. Multi-select option is available for the following folders:

The default value is set to false, and must be set to true to enable document sharing.





A unique, sufficiently complex alphanumeric string

This key manages the decryption of documents from Ivanti Docs@Work extension. Once this key is set in Ivanti Docs@Work configuration, only the apps having the identical key value in their configuration would be able to decrypt the documents from Ivanti Docs@Work Extension.

This is an optional key.

The key is case sensitive. Enter the key in uppercase.

IMPORTANT: Configure mi_enable_doc_sharing with value true to enable document sharing.

A unique, sufficiently complex alphanumeric string

This key manages the access control between the apps. Once this key is set in Ivanti Docs@Work configuration, only the apps having the identical key value in their configuration would be able to access the documents from Ivanti Docs@Work Extension.

Ensure that the key-value pair is configured in the Ivanti Email+ configuration as well and that the value is identical (including case) in both Ivanti Docs@Work and Ivanti Email+ configurations.

The key is case sensitive. Enter the key in uppercase.

IMPORTANT: Configure mi_enable_doc_sharing with value true to enable document sharing.





This key allows the admin to add attachements when you compose mail using Ivanti Email+ or anyother email client.

This key is applicable while sharing documents from Ivanti Docs@Work with non AppConnect apps.:

Sentry: The documents are encrypted using Sentru attachement control key.

All: The attachements are not encryptyed and are sent as plain text.

The key is case sensitive. Enter the key in uppercase.

Allows the admin to block or unblock unmanaged versions of Ivanti Docs@Work from exposing the document extension to all the apps. Default is set to false. If an admin wants to restrict the document sharing extension to only managed apps, then the block_unmanaged_extension key should be set to true. In addition to this, a separate configuration parameter IS_MANAGED should be set to true via the iOS MDM managed configuration. A sample of sample of managed app configuration is as follows:

<?xml version=“1.0” encoding=“

UTF‐8"?>

<!DOCTYPE plist PUBLIC “‐//

Apple//DTD PLIST

1.0//EN” “http://www.apple.com/

DTDs/PropertyList‐1.0.dtd“>

<plist version=“1.0”>

<dict>

<key>IS_MANAGED</key>

<true/>

</dict>

</plist>

The key must be configured under Managed App Configuration.

Set this key to true to restrict the extension to managed apps only.

A sample.contents of managed app is as follow:

<?xml version=“1.0” encoding=“UTF-8"?>

<!DOCTYPE plist PUBLIC “-//Apple//DTD PLIST 1.0//EN” “http://www.apple.com/DTDs/PropertyList-1.0.dtd“>

<plist version=“1.0”>

<dict>

<key>IS_MANAGED</key>

<true/>

</dict>

</plist>

The default values is set to False.





This key allows the admin to enable or disable the use of custom keyboards. This key is enabled for AppConnect. This is case sensitive.

true: Doc@Work allows the use of custom keyboards

false: Ivanti Docs@Work does not allow the use of custom keyboards.

Default if key-value is not configured: true.

This key-value pair is case sensitive.





Specifies the level of logging from the least to the most verbose.

Default if key-value is not configured: true.

Any string

Underspecification prompted in Mobile@Work to activate AppConnect logs

Enables collecting AppConnect logs to a file in Ivanti Docs@Work.





Certificate

This key allows the admin to enable or disable the use of digital signature for PDF forms in Ivanti Docs@Work added.

To enable digital signature add signing_certificate to Ivanti Docs@Work configuration to provide the certificate in .p12 format used for PDF signing.

Certificate

This key allows the admin to add multiple Certificate Authorities to trusted CA’s.

If the signing_certificate is not issued by the CA which is not publicly trusted. The certificate must be DER-encoded.

Where, the value of n can be 0 to 9.

For example:

signing_certificate_ca_0,

signing_certificate_ca_1.





This key allows the admin to fix the text data leak from Ivanti Docs@Work document view or edit when you perform the Define and LookUp functions.

For example:

document_menu_restricted_items = define|lookup

This key prevents the device screen from getting locked during Microsoft PowerPoint presentation after Auto Lock timeout.

Grouping offline files based on file path feature is added. To enabled this key set the "group_offline_files" key value to true in Ivanti Docs@Work key-value pairs. The default value of this KVP is false.

Offline file grouping is only for the Ivanti Docs@Work and not for the file shown in the extension. After upgrade, if KVP is set to true, all offline files appear grouped.

A unique, sufficiently complex alphanumeric string.

This key allows admin to enable sharing documents securely between Ivanti Docs@Work and Microsoft IntuneMAM protected Office365 apps through FilePass.

The value for this key-value pair needs to be same for the all the supported productivity apps (Ivanti Docs@Work, Ivanti Email+, and FilePass) participating in File Sharing with Microsoft Office 365 apps.

This key allows admin to disable device auto-lock during download or upload. The default values is set to False.

This key allows admin to enable special characters in the file name for a new folder or file created in Ivanti Docs@Work. The following special characters are allowed in the file names: ~`#%^+;={}[],.'

Uploading files with special characters may not work for all the sites.

This key allows admin to select the file viewer from the Settings.

This key allows the admin to enable or disable file imports.

true: No message is displayed and the files are imported directly to the My Files folder.

false: A dialog box is displayed to check if you want to import the files into the Remote Site or My Files folder.

If key-value pair is not configured, then no message is displayed and the files are imported directly into My Files folder.