sap afaria windows phone user guide - sap help …€¦ · 1 windows phone device management...

AfariaVersion: 7 SP4 - 2014-12-09

SAP Afaria Windows Phone User Guide

Content1 Windows Phone Device Management Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31.1 Enrolling Windows Phone Devices in Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41.2 Enabling Location Service on the Device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

1.2.1 Accepting or Rejecting Location Collection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121.2.2 Re-enabling Blocked Location Collection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

1.3 Renewing Certificates on the Device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151.4 Removing Windows Phone Devices from Afaria Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

2 © 2014 SAP SE or an SAP affiliate company. All rights reserved.SAP Afaria Windows Phone User Guide

Content

1 Windows Phone Device Management OverviewWindows Phone devices provide a built in device management client to communicate with the Afaria server. Enroll devices using the enrollment URL that you obtain from the Self-Service Portal, or that the administrator distributes. After enrollment, during the first connection to the Afaria server, the Afaria application is silently installed on the device.

The life cycle of a Windows Phone device in Afaria management is summarized:

1. On the Afaria Administration console, create a Windows Phone enrollment policy.The enrollment code URL to enroll the device is auto-generated based on the enrollment server settings.

2. Access the Self-Service Portal on the device and activate the enrollment code URL.3. Enter values for user variables on the portal, if variables are configured in the enrollment policy.

The variable prompts appear for user input only if the enrollment happens through the Self-Service Portal.4. To enroll a device, provide valid credentials to create a company apps user account, and copy the enrollment

code URL from the Self-Service Portal on to the Server field.During enrollment, the Afaria application installs on the device, silently.

5. (Optional) On the device, install enterprise or Windows store apps, as you require.All the associated enterprise and Windows store apps will be listed when you launch the Afaria application on the device.

NoteIf you use a slow-speed internet connection (2G or a similar connection) to connect to the Afaria server, the Afaria application and the enterprise applications installed through Afaria will only be queued for download and install.

6. To remove the device from Afaria management, delete the company apps account on the device.Afaria application and all the enterprise apps installed through Afaria will be removed when you delete the company apps account.

SAP Afaria Windows Phone User GuideWindows Phone Device Management Overview © 2014 SAP SE or an SAP affiliate company. All rights reserved. 3

Figure 1: Windows Phone Device Enrollment in Afaria Management

1.1 Enrolling Windows Phone Devices in Management

Enroll a Windows Phone device in Afaria management using the enrollment code URL, obtained from the Self-Service Portal or directly from the Afaria administrator.

Prerequisites

If you are using Self-Service Portal, ensure that a Self-Service Portal user account is created for you.


Windows Phone Device Management Overview

Context

This procedure provides a sequential diagrammatic representation of the Windows Phone enrollment process.

Procedure

1. On the device, sign in to the Self-Service Portal, providing your login credentials for authentication.The Self-Service Portal URL is either sent to you, or made available on the corporate portal.

2. On the portal home page, tap the Enroll New Device option.


3. Tap the Activate Enrollment Code URL option.

4. Enter values for the user variables, as configured on the Afaria Administration console.



The variable prompts appear for user input only if the enrollment happens through the Self-Service Portal, and only the variables configured in the enrollment policy appear for user input.

5. Copy the Enrollment Code URL and paste it on to the Server field on Settings company apps page, on the device.

Tap the URL and select the copy link option to copy the link on to the device clipboard.

6. Exit the portal, and navigate to the Settings company apps page.


7. Tap add account to create a user account to connect to the Afaria server.8. Enter Email address, Password, Username, and Domain details.

The details you must enter vary based on the type of authentication used, whether NT domain-based or Active Directory authentication. LDAP-based authentication is not supported for Windows Phone devices.

○ NT domain-based authentication – the enrollment server should use Windows authentication. Details to be entered for the company apps account:

○ Email address – in the format [email protected]. Need not be a valid Id.○ Password – required. Should match the user's credentials.○ Username – required. Valid user name for the defined NT domain.○ Domain – required. Should match the format defined under the Security settings.

○ Active Directory authentication – the enrollment server should use Afaria managed authentication. Details to be entered for the company apps account:

○ Email address – required in the User Principal Name (UPN) format [email protected].○ Password – required. Should match the user's credentials.○ Username – not required.○ Domain – not required.

If you use directory substitution variables with Active Directory authentication, you must leave Username and Domain fields blank, so that the user name is pulled back in for directory variable substitution.For Afaria managed authentication, the login prompt on the Afaria application appears only if the 'Enable authentication' option is enabled on Server Configuration Security page.

9. Paste the URL from the clipboard on to the Server field.



10. Click sign in.

The device uses the Server address to enroll in Afaria management.

11. Tap done to complete the enrollment.The Afaria application installs on the device, if the signed Afaria application (.xap) file has been uploaded in the Afaria Administration console.

12. On the company apps page, verify that the device is enrolled in Afaria.


1.2 Enabling Location Service on the Device

Configure the location parameter on the device to enable location services.

Prerequisites

Ensure that 'Enable Activity Collection' and 'Collect Subscriber Location Information' options are enabled in Server Configuration Device Activity page on the Afaria Administration console.

Location collection will be enabled only if the Afaria application is launched at least once on the device.

Context

Procedure

1. On the device, navigate to the Settings page.



2. Tap location.

3. Tap and change the Location services toggle switch to 'On'.


1.2.1 Accepting or Rejecting Location Collection

Accept or reject location information collection on the device. Location collection is enabled on the device, based on the device activity settings configured on the Afaria Administration console.

Procedure

1. Launch the Afaria application on the device.The device activity collection prompt appears, if configured on the Administration console.

2. Tap accept if you agree for location collection.A background service enabled for the Afaria application, runs along with other scheduled operating system tasks and collects device activity data.

3. (Optional) Navigate to Settings applications background tasks page to verify that a background task has been associated with the Afaria application, and that Afaria is allowed to collect device activity details.



4. To reject location collection, tap cancel on the device activity prompt page.

5. (Optional) Navigate to Settings applications background tasks page to verify that no background tasks have been associated with the Afaria application.


1.2.2 Re-enabling Blocked Location Collection

To re-enable a blocked location collection service on the device, the administrator has to enable the device activity parameters in the Afaria Administration console.

Procedure

1. On the device, navigate to the Settings applications background tasks page.If location collection has been disabled in the Administration console, background tasks page will indicate that Afaria is blocked from collecting location details.

NoteIn this case, the location service cannot be re-enabled even if you enable the ‘Turn background tasks back on for this app the next time I open it’ option, and open the app again.



Background tasks that have been enabled for apps, may automatically get blocked if the app has not been opened in two weeks. You can turn such background tasks on by selecting the ‘Turn background tasks back on for this app the next time I open it’ option, and opening the app again.

2. If the Afaria application has been enabled for location collection, but the application was not launched on the device for two weeks, you can restart the location collection background service by enabling the ‘Turn background tasks back on for this app the next time I open it’ option and reopening the Afaria app.

1.3 Renewing Certificates on the Device

Renew the certificate on the Windows Phone device on or before the expiry of the certificate.

Context

For renewing certificate, an attention alert appears on the device, based on the certificate renewal alert duration configured on the Afaria Administration console.

Procedure

1. On the device, navigate to the Settings company apps page.


2. Tap the highlighted Attention required message.

3. Enter the Password.4. Tap done.

The certificate is renewed on the device.



1.4 Removing Windows Phone Devices from Afaria Management

Remove Windows Phone devices from Afaria management either directly from the device, or remotely by the administrator.

Prerequisites

The Windows Phone device should be enrolled in Afaria management.

Context

This procedure provides a sequential diagrammatic representation of the disconnection of Windows Phone devices from Afaria, initiated from the device.

Procedure

1. On the Windows Phone device, navigate to the Settings company apps page.

2. Tap the Delete icon to delete the company apps account.


3. On the Settings company apps page, verify that the Afaria account details are removed.

NoteAfaria application and all the enterprise apps installed through Afaria will be removed when you delete the company apps account. While disconnecting from Afaria management, the Exchange e-mail account configured by Afaria on the device will also be removed, although the message that appears on the device may indicate otherwise.



Important Disclaimers and Legal Information

Coding SamplesAny software coding and/or code lines / strings ("Code") included in this documentation are only examples and are not intended to be used in a productive system environment. The Code is only intended to better explain and visualize the syntax and phrasing rules of certain coding. SAP does not warrant the correctness and completeness of the Code given herein, and SAP shall not be liable for errors or damages caused by the usage of the Code, unless damages were caused by SAP intentionally or by SAP's gross negligence.

AccessibilityThe information contained in the SAP documentation represents SAP's current view of accessibility criteria as of the date of publication; it is in no way intended to be a binding guideline on how to ensure accessibility of software products. SAP in particular disclaims any liability in relation to this document. This disclaimer, however, does not apply in cases of wilful misconduct or gross negligence of SAP. Furthermore, this document does not result in any direct or indirect contractual obligations of SAP.

Gender-Neutral LanguageAs far as possible, SAP documentation is gender neutral. Depending on the context, the reader is addressed directly with "you", or a gender-neutral noun (such as "sales person" or "working days") is used. If when referring to members of both sexes, however, the third-person singular cannot be avoided or a gender-neutral noun does not exist, SAP reserves the right to use the masculine form of the noun and pronoun. This is to ensure that the documentation remains comprehensible.

Internet HyperlinksThe SAP documentation may contain hyperlinks to the Internet. These hyperlinks are intended to serve as a hint about where to find related information. SAP does not warrant the availability and correctness of this related information or the ability of this information to serve a particular purpose. SAP shall not be liable for any damages caused by the use of related information unless damages have been caused by SAP's gross negligence or willful misconduct. All links are categorized for transparency (see: http://help.sap.com/disclaimer).

SAP Afaria Windows Phone User GuideImportant Disclaimers and Legal Information © 2014 SAP SE or an SAP affiliate company. All rights reserved. 19

http://help.sap.com/disclaimer/

www.sap.com/contactsap

© 2014 SAP SE or an SAP affiliate company. All rights reserved.No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company. The information contained herein may be changed without prior notice.Some software products marketed by SAP SE and its distributors contain proprietary software components of other software vendors. National product specifications may vary.These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional warranty.SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries. All other product and service names mentioned are the trademarks of their respective companies.Please see http://www.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.

http://www.sap.com/contactsap

http://www.sap.com/corporate-en/legal/copyright/index.epx

http://www.sap.com/corporate-en/legal/copyright/index.epx

sap afaria windows phone user guide - sap help …€¦ · 1 windows phone device management...

Documents