---
title: Ivanti EPMM 12.7.0.0 - What's New
slug: epmm/release-upgrade-guide/ivanti-epmm-12700-whats-new
createdAt: 2026-10-26T15:03:36.330Z
---

## General features

- **Support for Google BeyondCorp**: Ivanti EPMM now supports Google BeyondCorp to enable compliant devices to securely access the applications and resources in the Google Workspace. For more information, see **Google BeyondCorp Configuration** in the *Ivanti EPMM Device Management Guide*.
- **New APIs added**: The following new APIs are added to devices action v2 API:
  - Cancel Retire devices
  - Cancel Wipe devices
    For more information, see **Device Management** in the *Ivanti EPMM V2 API Guide*.
- **Enable kiosk mode**: New v2 API **enablekiosk** added for devices to automate the kiosk mode activation process. . For more information, see **Device Management** in the *Ivanti EPMM V2 API Guide*.
- **New user-interface for self-service portal**: The Self-Service Portal is updated with a new user interface. The admins can navigate back to the old user portal by deselecting the "**Enable New Self Service Portal**"option in the **Settings > General > Self-Service Portal**. The "**Background color**" and "**CSS**" are not available on the new portal. For more information, see **Customizing the self-service user portal** in *Ivanti EPMM Device Management Guide*.

:::hint{type="info"}
If the admin selects the old portal for Self-Service Portal and continues to use it, then the admin has to repeat the same steps after upgrading to EPMM 12.7.0.0 and related patches.
:::

## Android features

- **Allow Thread Network option added**: Administrators can now toggle the '**Allow Thread Network**' option for Devices in Managed Device with Work Profile Mode or Work managed device mode to allow or disallow the Thread networks on a device. Navigate to **EPMM admin portal > Policies and Configs > Policies > Lockdown > Managed device**. This is applicable for Android 16+ devices. For more information, see **Setting the kiosk policy for Android managed devices** in the *Ivanti EPMM Getting started Guide*.
- **Support for runtime permissions for Android in house apps**: Starting from EPMM 12.7.0.0, **Runtime permissions** section is added for Android in-house android apps with standard and custom runtime permissions in the app configurations. For the existing in-house apps the admin has to manually go to edit the app to see the new permission section and save the configuration. For more information, see **Adding in-house apps for Android** in the *Ivanti EPMM App\@Work guide*.

## iOS and macOS features

::embed[**Addition of Support tab in Ivanti Mobile@Work**: Using Ivanti EPMM, administrators can add and configure the Support tab in Ivanti Mobile@Work for iOS. For more information see, **Ivanti Mobile@Work Support Tab Policy** in the *Ivanti EPMM Device Management Guide for Apple devices*.

For a step-by-step video demonstration of configuring the **Ivanti Mobile@Work Support Tab Policy**, click the following **YouTube** link: [Effortless End-User Support | Ivanti Mobile@Work Support Tab Configuration](https://youtu.be/8XSOLAQaAGA)]{url="https://youtu.be/8XSOLAQaAGA" indent="1"}

- **Support for new restrictions for iOS devices**: The following iOS restrictions are added for supervised devices operating with version iOS 26.0 and later:
  - Denied ICCIDs for iMessage FaceTime
  - Denied ICCIDs for RCS
  - Allowed Exceptions to Camera Restriction
- **Support for new restrictions for iOS and macOS devices**: The following iOS and macOS restrictions are added for supervised devices operating with version iOS and macOS 26.0 and later:
  - Allow Safari History Clearing
  - Allow Safari Private Browsing
- **New configuration added iOS and macOS**: New configuration added to **Policies & Configs > Add New> Apple > iOS/macOS > Safari Settings** section and supported on iOS 26 and macOS 26 devices. The administrator can use the **Safari Settings** configuration to set the Start page for new settings in Safari. The following keys are added for supervised devices:
  - Allow Disabling Fraud Warning
  - Allow History Clearing
  - Allow JavaScript
  - Allow Private Browsing
  - Allow Popups
  - Allow Summary
    For more information, see **Safari Settings** in the *Ivanti EPMM Device Management Guide for Apple devices*.
- **Support for Apple Access Management**: EPMM now supports **Apple Access Management** for Supervised and Managed devices. For more information, see **Apple Access Management** in the *Ivanti EPMM Device Management Guide for Apple devices*.
- **Support for Apple artificial intelligence restrictions**: The following Apple artificial intelligence restrictions added:
  - Allow Visual Intelligence Summary: Supported from iOS 18.3
  - Allow Notes Transcription: Supported from iOS 18.4 and macOS 15.4
- **Support for Bootstrap tokens for macOS**: Added new capability (com.apple.mdm.bootstraptoken) in DEP Enrollments. With this capability iOS and macOS devices present a bootstrap token to EPMM at the time of enrollment and it is saved on EPMM under device details. The bootstrap token is used to:
  - Authorize installation of Software Updates.
  - Silently authorize to “erase all content and settings MDM command”. .
    For more information, see **Apple Device Enrollment with Ivanti EPMM overview **in the *Ivanti EPMM Device Management Guide for Apple devices*.
- **Support to delete duplicate LDAP group**: Ability to change LDAP settings to delete duplicate LDAP with active association.