XenMobile

Add apps

Adding apps to XenMobile provides mobile application management (MAM) capabilities. XenMobile assists with application delivery, software licensing, configuration, and application life cycle management.

MDX-enabling apps is an important part of preparing most types of apps for distribution to user devices. For an introduction to MDX, seeAbout the MDX ToolkitandMAM SDK overview.

  • Citrix recommends use of the MAM SDK to MDX-enable apps. Or, you can continue to MDX-wrap apps until the MDX Toolkit is deprecated. SeeDeprecation.
  • You cannot use the the MDX Toolkit to wrap Citrix mobile productivity apps. Get the mobile productivity app MDX files from Citrix downloads.

When you add apps to the XenMobile console, you:

  • Configure app settings
  • Optionally arrange apps into categories to organize them in Secure Hub
  • Optionally define workflows to require approval before allowing users to access an app
  • Deploy apps to users

This article covers the general workflows for adding apps. See the following articles for platform specifics:

App types and features

The following table summarizes the types of apps you can deploy with XenMobile.

App type Sources Notes See
MDX iOS and Android apps you develop for your users. Citrix mobile productivity apps. Develop iOS or Android apps with the MAM SDK or wrap them with the MDX Toolkit. For the mobile productivity apps, download the public-store MDX files from Citrix downloads. Then, add the apps to XenMobile. Add an MDX app
Public app store Free or paid apps from public app stores such as Google Play or the Apple App Store. Upload the apps, MDX-enable the apps, then add the apps to XenMobile. Add a public app store app
Web and SaaS Your internal network (web apps) or a public network (SaaS). Citrix Workspace provides mobile single sign-on to native SaaS apps from iOS and Android devices enrolled in MDM. Or, use Security Assertion Markup Language (SAML) application connectors Add a Web or SaaS app
Enterprise Private apps, including Win32 apps, that aren’t MDX-enabled. Private Android Enterprise apps that are MDX-enabled. Enterprise apps reside in Content Delivery Network locations or XenMobile servers. Add the apps to XenMobile. Add an enterprise app
Web link Internet web addresses, intranet web addresses, or web apps that don’t require single sign-on. Configure web links in XenMobile. Add a Web link

When planning app distribution, consider these features:

About silent installations

Citrix supports the silent installation and upgrade of iOS, Android Enterprise, and Samsung apps. Silent installation means that users are not prompted to install apps that you deploy to the device. The apps install automatically in the background.

Prerequisites to implement silent installation:

About required and optional apps

When you add apps to a delivery group, you choose whether they are optional or required. Citrix recommends deploying apps asRequired.

  • Required apps install silently on user devices, minimizing interaction. Having this feature enabled also allows apps to update automatically.

  • Optional apps allow users to choose what apps to install, but users must initiate the installation manually through Secure Hub.

为应用程序标记为需要,用户可以及时再保险ceive updates in situations such as:

  • You upload a new app and mark it as required.
  • You mark an existing app as required.
  • A user deletes a required app.
  • A Secure Hub update is available.

Requirements for forced deployment of required apps

  • XenMobile Server 10.6 (minimum version)
  • Secure Hub 10.5.15 for iOS and 10.5.20 for Android (minimum versions)
  • MAM SDK or MDX Toolkit 10.6 (minimum version)
  • Custom server property, force.server.push.required.apps

    The forced deployment of required apps is disabled by default. To enable the feature, create a Custom Key server property. Set theKeyandDisplay nametoforce.server.push.required.appsand set theValuetotrue.

  • After you upgrade XenMobile Server and Secure Hub: Users with enrolled devices must sign off and then sign on to Secure Hub, one time, to obtain the required app deployment updates.

Examples

The following examples show the sequence of adding an app named Secure Tasks to a delivery group and then deploying the delivery group.

Delivery Groups configuration screen

Delivery Groups configuration screen

After the sample app, Secure Tasks, deploys to the user device, Secure Hub prompts the user to install the app.

Secure Hub screen

Secure Hub screen

Important:

MDX-enabled required apps, including enterprise apps and public app store apps, upgrade immediately. The upgrade occurs even if you configure an MDX policy for an app update grace period and the user chooses to upgrade the app later.

iOS required app workflow for enterprise and public store apps

  1. Deploy the XenMobile App during initial enrollment. The required app is installed on the device.
  2. Update the app on the XenMobile console.
  3. Use the XenMobile console to deploy required apps.
  4. The app on the home screen is updated. And, for public store apps, the upgrade starts automatically. Users are not prompted to update.
  5. Users open the app from the home screen. Apps upgrade immediately even if you set an App update grace period and the user taps to upgrade the app later.

Android required app workflow for enterprise apps

  1. Deploy the XenMobile App during initial enrollment. The required app is installed on the device.
  2. Use the XenMobile console to deploy required apps.
  3. 应用程序升级。(联系设备提示install updates, but Samsung devices do a silent install.)
  4. Users open the app from the home screen. Apps upgrade immediately even if you set an App update grace period and the user taps to upgrade the app later. (Samsung devices do a silent install.)

Android required app workflow for public store apps

  1. Deploy XenMobile App during initial enrollment. The required app is installed on the device.
  2. Update the app on the XenMobile console.
  3. Use the XenMobile console to deploy required apps. Or, open the Secure Hub Store on the device. The update icon appears in the store.
  4. App upgrade starts automatically. (Nexus devices prompt users to install the update.)
  5. Open the app on the home screen. The app is upgraded. Users are not prompted for a grace period. (Samsung devices do a silent install.)

Uninstall an app when the app is configured as required

You can allow users to uninstall an app that is configured as required. Go toConfigure > Delivery Groupsand move the app fromRequired AppstoOptional Apps.

Recommended:Use a special delivery group to temporarily change an app to optional, so that specific users can uninstall the app. You can then change an existing required app to optional, deploy the app to that delivery group, and then uninstall the app from those devices. After that, if you want future enrollments for that delivery group to require the app, you can set the app back to required.

About app categories

When users log on to Secure Hub, they receive a list of the apps, web links, and stores that you set up in XenMobile. You can use app categories to let users access only certain apps, stores, or web links. For example, you can create a Finance category and then add apps to the category that only pertain to finance. Or, you can configure a Sales category to which you assign sales apps.

When you add or edit an app, web link, or store, you can add the app to one or more of the configured categories.

  1. In the XenMobile console, clickConfigure > Apps > Category. TheCategoriesdialog box appears.

    Apps configuration screen

  2. For each category you want to add, do the following:

    • Type the name of the category you want to add in theAdd a new categoryfield at the bottom of the dialog box. For example, you might type Enterprise Apps to create a category for enterprise apps.
    • Click the plus sign (+) to add the category. The newly created category is added and appears in theCategoriesdialog box.

    Apps configuration screen

  3. When you’re done adding categories, close theCategoriesdialog box.

  4. 在theAppspage, you can place an existing app into a new category.

    • Select the app you want to categorize.
    • ClickEdit. TheApp Informationpage appears.
    • In theApp categorylist, apply the new category by selecting the category check box. Clear the check boxes for any existing categories that you don’t want to apply to the app.
    • Click theDelivery Groups Assignmentstab or clickNexton each of the following pages to step through the remaining app set-up pages.
    • ClickSaveon theDelivery Groups Assignmentspage to apply the new category. The new category is applied to the app and appears in theAppstable.

Add an MDX app

When you receive an MDX file for an iOS or Android app, you can upload the app to XenMobile. After you upload the app, you can configure app details and policy settings. For more information about the app policies that are available for each device platform type, see:

  1. In the XenMobile console, clickConfigure > Apps. TheAppspage appears.

    Apps configuration screen

  2. ClickAdd. TheAdd Appdialog box appears.

    Apps configuration screen

  3. ClickMDX. TheMDX App Informationpage appears.

  4. 在theApp Informationpane, type the following information:

    • Name:Type a descriptive name for the app. The name appears underApp Nameon theAppstable.
    • Description:Type an optional description of the app.
    • App category:Optionally, in the list, click the category to which you want to add the app. For more information about app categories, seeAbout app categories.
  5. ClickNext. TheApp Platformspage appears.

  6. UnderPlatforms, select the platforms you want to add. If you are only configuring for one platform, clear the others.

  7. To select an MDX file to upload, clickUploadand navigate to the file location.

  8. In the应用德泰lspage, configure these settings:

    • File name:Type the file name associated with the app.
    • App Description:Type a description for the app.
    • App version:Optionally, type the app version number.
    • Package ID:Type the package ID for the app, obtained from the managed Google Play Store.
    • Minimum OS version:Optionally, type the oldest operating system version that the device can run to use the app.
    • Maximum OS version:Optionally, type the most recent operating system that the device must run to use the app.
    • 排除设备s:Optionally, type the manufacturer or models of devices that cannot run the app.
    • Remove app if MDM profile is removed:Select whether to remove the app from an iOS device when the MDM profile is removed. The default is.
    • Prevent app data backup:Select whether to prevent users from backing up app data on iOS devices. The default is.
    • Product track:Specify which product track you want to push to iOS devices. If you have a track designed for testing, you can select and assign it to your users. The default isProduction.
    • Force app to be managed:For an app that installs as unmanaged, select whether to prompt users to allow the app to be managed on unsupervised iOS devices. The default is.
    • App deployed via volume purchase:Select whether to deploy the app by using Apple volume purchase. If, and you deploy an MDX version of the app and use volume purchase to deploy the app, Secure Hub shows only the volume purchase instance. Default isOff.
  9. Configure theMDX Policies. MDX policies vary by platform and include options for such policy areas as authentication, device security, and app restrictions. In the console, each of the policies has a tooltip that describes the policy.

  10. Configure the deployment rules. For information, seeDeployment rules.

  11. ExpandStore Configuration.

    Apps configuration screen

    • App FAQ:ClickAdd a new FAQ question and answerto create a FAQ for the app.
    • Add screenshots for phones/tablets:Add screen captures that appear in the app store.
    • Allow app ratings:Allow users to rate the app in the app store.
    • Allow app comments:Allow users to leave comments on the app in the app store.
  12. ClickNext. TheApprovalspage appears.

    Apps configuration screen

    To use workflows to require approval before allowing users to access the app, see运用工作流. If you don’t want to set up approval workflows, continue with the next step.

  13. ClickNext. TheDelivery Group Assignmentpage appears.

    Apps configuration screen

  14. Next toChoose delivery groups, type to find a delivery group or select a group or groups in the list. The groups you select appear in theDelivery groups to receive app assignmentlist.

  15. ExpandDeployment Scheduleand then configure the following settings:

    • Deploy:选择是否将应用程序部署到设备。default is.
    • Deployment schedule:Choose whether to deploy the appNoworLater. If you selectLater, configure a date and time to deploy the app. The default isNow.
    • Deployment condition:Choose在every connectionto deploy the app every time the device connects. Choose在ly when previous deployment has failedto deploy the app when the device failed to receive the app previously. The default is在every connection.

    TheDeploy for always-on connectionoption applies when you have configured the scheduling background deployment key inSettings > Server Properties.

    deployment schedule you configure is the same for all platforms. Any changes you make apply to all platforms, except forDeploy for always-on connection.

  16. ClickSave.

Add a public app store app

You can add free or paid apps to XenMobile that are available in a public app store, such as the Apple App Store or Google Play.

You can configure settings to retrieve app names and descriptions from the Apple App Store. When you retrieve the app information from the store, XenMobile overwrites the existing name and description. Manually configure Google Play store app information.

When you add a paid public app store app for Android Enterprise, you can review the Bulk Purchase licensing status. That status is the total number of licenses available, the number currently in use, and the email address of each user consuming the licenses. The Bulk Purchase plan for Android Enterprise simplifies the process of finding, buying, and distributing apps and other data in bulk for an organization.

Configure app information and choose platforms to deliver the app to:

  1. In the XenMobile console, clickConfigure > Apps > Add. TheAdd Appdialog box appears.

    Apps configuration screen

  2. ClickPublic App Store. TheApp Informationpage appears.

  3. 在theApp Informationpane, type the following information:

    • Name:Type a descriptive name for the app. This name appears underApp Nameon theAppstable.
    • Description:Type an optional description of the app.
    • App category:Optionally, in the list, click the category to which you want to add the app. For more information about app categories, seeAbout app categories.
  4. ClickNext. TheApp Platformspage appears.

  5. UnderPlatforms, select the platforms you want to add. If you are only configuring for one platform, clear the others.

Next you configure the app settings for each platform. See:

When you finish configuring the settings for a platform, set the platform deployment rules and app store configuration.

  1. Configure the deployment rules. For information, seeDeployment rules.

  2. ExpandStore Configuration.

    Apps configuration screen

    • App FAQ:ClickAdd a new FAQ question and answerto create a FAQ for the app.
    • Add screenshots for phones/tablets:Add screen captures that appear in the app store.
    • Allow app ratings:Allow users to rate the app in the app store.
    • Allow app comments:Allow users to leave comments on the app in the app store.

Configure app settings for Google Play apps

Note:

To make all apps in the Google Play store accessible from managed Google Play, use the XenMobile server property,Access all apps in the managed Google Play store. SeeServer properties. Setting this property totrueallows the public Google Play store apps for all Android Enterprise users. You can then use can then use theRestrictions device policyto control access to these apps.

Configuring settings Google Play store apps requires different steps than apps for other platforms. You must manually configure Google Play store app information.

  1. Ensure thatGoogle Playis selected underPlatforms.

    searching for app

  2. Go to the Google Play store. From the Google Play store, copy the package ID. The ID can be found in the URL of the app.

    searching for app

  3. When adding a Public Store app in the XenMobile Server console, paste the package ID in the search bar. ClickSearch.

    searching for app

  4. If the package ID is valid, a UI appears allowing you to enter app details.

    searching for app

  5. You can configure the URL for the image to appear with the app in the store. To use the image from the Google Play store:

    1. Go the Google Play store. Right-click the app image and copy the image address.

    2. Paste the image address into theImage URLfield.

    3. ClickUpload image. The image appears besideImage.

If you don’t configure an image, the generic Android image appears with the app.

Configure app settings for iOS apps

  1. Type the app name in the search box and clickSearch. Apps matching the search criteria appear. Apps matching the search criteria appear.

    The following figure shows the result of searching forpodioin apps on an iPhone.

    Apps configuration screen

  2. Click the app you want to add.

  3. TheApp Detailsfields pre-populate with information related to the chosen app (including the name, description, version number, and associated image).

    Apps configuration screen

  4. Configure the settings:

    • If necessary, change the name and description for the app.
    • Paid app:This field is preconfigured and cannot be changed.
    • Remove app if MDM profile is removed:Select whether to remove the app if the MDM profile is removed. The default isON.
    • Prevent app data backup:Select whether to prevent the app from backing up data. The default isON.
    • Product track:Specify which product track you want to push to user devices. If you have a track designed for testing, you can select and assign it to your users. The default isProduction.
    • Force app to be managed:Select whether, when the app is installed unmanaged, to prompt users to allow the app to be managed on unsupervised devices. The default isOFF. Available in iOS 9.0 and later.
    • Force license to association to device:Select whether to associate an app that has been developed with device association enabled to a device rather than to a user. Available in iOS 9 and later. If the app you chose does not support assignment to a device, this field can’t be changed.
  5. Configure the deployment rules. For information, seeDeployment rules.

  6. ExpandStore Configuration.

    Apps configuration screen

    • App FAQ:ClickAdd a new FAQ question and answerto create a FAQ for the app.
    • Add screenshots for phones/tablets:Add screen captures that appear in the app store.
    • Allow app ratings:Allow users to rate the app in the app store.
    • Allow app comments:Allow users to leave comments on the app in the app store.
  7. For iPhone or iPad, expandVolume Purchase.

    1. To enable XenMobile to apply a volume purchase license for the app: In theVolume purchase licenselist, clickUpload a volume purchase license.

    2. 在出现的对话框中,即时通讯port the license.

      The License Assignment table shows the number of licenses in use for the app, out of the total licenses available.

      You can disassociate Volume Purchase licenses for an individual user. Doing so ends the license assignments and frees licenses.

  8. 为Android企业,扩大Bulk Purchasesection.

    The License Assignment table shows the number of licenses in use for the app, out of the total licenses available.

    You can select a user and then clickDisassociateto end their license assignment and free a license for another user. You can only disassociate the license, however, if the user is not part of a delivery group that contains the specific app.

    Apps configuration screen

  9. After you complete theVolume PurchaseorBulk Purchasesettings, clickNext. TheApprovalspage appears.

    To use workflows to require approval before allowing users to access the app, see运用工作流. If you don’t need approval workflows, continue with the next step.

  10. ClickNext. TheDelivery Group Assignmentpage appears.

  11. Next toChoose delivery groups, type to find a delivery group or select a group or groups in the list. The groups you select appear in theDelivery groups to receive app assignmentlist.

  12. ExpandDeployment Scheduleand then configure the following settings:

    • Deploy:选择是否将应用程序部署到设备。default is.
    • Deployment schedule:Choose whether to deploy the appNoworLater. If you selectLater, configure a date and time to deploy the app. The default isNow.
    • Deployment condition:Choose在every connectionto deploy the app every time the device connects. Choose在ly when previous deployment has failedto deploy the app when the device failed to receive the app previously. The default is在every connection.

    TheDeploy for always-on connectionapplies when you have configured the scheduling background deployment key inSettings > Server Properties.

    deployment schedule you configure is the same for all platforms. Any changes you make apply to all platforms, except forDeploy for always-on connection.

  13. ClickSave.

Add a Web or SaaS app

Using the XenMobile console, you can give users single sign-on (SSO) authorization to your mobile, enterprise, web, and SaaS apps. You can enable apps for SSO by using application connector templates. For a list of connector types available in XenMobile, seeApplication connector types. You can also you build your own connector in XenMobile when you add a Web or SaaS app.

If an app is available for SSO only: After you save the settings, the app appears on theAppstab in the XenMobile console.

  1. In the XenMobile console, clickConfigure > Apps > Add. TheAdd Appdialog box appears.

    Apps configuration screen

  2. ClickWeb & SaaS. TheApp Informationpage appears.

    Apps configuration screen

  3. Configure an existing or new app connector, as follows.

To configure an existing app connector

  1. In theApp Informationpage,Choose from existing connectorsis already selected, as shown previously. Click the connector you want to use in theApp Connectorslist. The app connector information appears.

  2. Configure these settings:

    • App name:Accept the pre-filled name or type a new name.
    • App description:Accept the pre-filled description or type one of your own.
    • URL:Accept the pre-filled URL or type the web address for the app. Depending on the connector you choose, this field may contain a placeholder that you must replace before you can move to the next page.
    • Domain name:If applicable, type the domain name of the app. This field is required.
    • App is hosted in internal network:Select whether the app is running on a server in your internal network. If users connect from a remote location to the internal app, they must connect through Citrix Gateway. Setting this option toONadds the VPN keyword to the app and allows users to connect through Citrix Gateway. The default isOFF.
    • App category:In the list, click an optional category to apply to the app.
    • User account provisioning:Select whether to create user accounts for the application. If you use the Globoforce_SAML connector, you must enable this option to ensure seamless SSO integration.
    • If you enableUser account provisioning, configure these settings:
      • Service Account
        • User name:Type the name of the app administrator. This field is required.
        • Password:Type the app administrator password. This field is required.
      • User Account
        • When user entitlement ends:In the list, click the action to take when users are no longer allowed access to the app. The default isDisable account.
      • User Name Rule
        • For each user name rule you want to add, do the following:
          • User attributes:In the list, click the user attribute to add to the rule.
          • Length (characters):In the list, click the number of characters from the user attribute to use in the user name rule. The default isAll.
          • Rule:Each user attribute you add is automatically appended to the user name rule.
    • Password Requirement
      • Length:Type the minimum user password length. The default is8.
    • Password Expiration
      • Validity (days):Type the number of days the password is valid. Valid values are0–90. The default is 90.
      • Automatically reset password after it expires:Select whether to reset the password automatically when it expires. The default isOFF. If you don’t enable this field, users can’t open the app after their passwords expire.

To configure a new app connector

  1. In theApp Informationpage, selectCreate a new connector. The app connector fields appear.

    Apps configuration screen

  2. Configure these settings:

    • Name:Type a name for the connector. This field is required.
    • Description:Type a description for the connector. This field is required.
    • Logon URL:Type, or copy and paste, the URL where users log on to the site. For example, if the app you want to add has a logon page, open a web browser and go to the logon page for the app. For example, it might behttps://www.example.com/logon. This field is required.
    • SAML version:Select either1.1or2.0. The default is1.1.
    • Entity ID:Type the identity for the SAML app.
    • Relay state URL:Type the web address for the SAML application. The relay state URL is the response URL from the app.
    • Name ID format:Select eitherEmail AddressorUnspecified. The default isEmail Address.
    • ACS URL:Type the Assertion Consumer Service URL of the identity provider or service provider. The ACS URL gives users SSO capability.
    • Image:Select whether to use the default Citrix image or to upload your own app image. The default is Use default.
      • To upload your own image, clickBrowseand navigate to the file location. The file must be a .PNG file. You can’t upload a JPEG or GIF file. When you add a custom graphic, you can’t change it later.
  3. When you’re finished, clickAdd. TheDetailspage appears.
  4. ClickNext. TheApp Policypage appears.

    Apps configuration screen

  5. Configure these settings:
    • Device Security
    • Block jailbroken or rooted:Select whether to block jailbroken or rooted devices from accessing the app. The default isON.
    • Network Requirements
    • WiFi required:Select whether a Wi-Fi connection is required to run the app. The default isOFF.
    • Internal network required:Select whether an internal network is required to run the app. The default isOFF.
    • Internal WiFi networks:If you enabledwi - fi所需, type the internal Wi-Fi networks to use.
  6. Configure the deployment rules. For information, seeDeployment rules.

  7. ExpandStore Configuration.

    Apps configuration screen

    • App FAQ:ClickAdd a new FAQ question and answerto create a FAQ for the app.
    • Add screenshots for phones/tablets:Add screen captures that appear in the app store.
    • Allow app ratings:Allow users to rate the app in the app store.
    • Allow app comments:Allow users to leave comments on the app in the app store.
  8. ClickNext. TheApprovalspage appears.

    Apps configuration screen

    To use workflows to require approval before allowing users to access the app, see运用工作流.

  9. ClickNext. TheDelivery Group Assignmentpage appears.

  10. Next toChoose delivery groups, type to find a delivery group or select a group or groups. The groups you select appear in theDelivery groups to receive app assignmentlist.

  11. ExpandDeployment Scheduleand then configure the following settings:

    • Deploy:选择是否将应用程序部署到设备。default is.
    • Deployment schedule:Choose whether to deploy the appNoworLater. If you selectLater, configure a date and time to deploy the app. The default isNow.
    • Deployment condition:Choose在every connectionto deploy the app every time the device connects. Choose在ly when previous deployment has failedto deploy the app when the device failed to receive the app previously. The default is在every connection.

    TheDeploy for always-on connectionapplies when you have configured the scheduling background deployment key inSettings > Server Properties.

    deployment schedule you configure is the same for all platforms. Any changes you make apply to all platforms, except forDeploy for always-on connection.

  12. ClickSave.

Add an enterprise app

企业应用XenMobile代表本地应用that are not prepared with the MAM SDK or MDX Toolkit. Those apps don’t contain the policies associated with MDX apps. You can upload an enterprise app on theAppstab in the XenMobile console. Enterprise apps support the following platforms (and corresponding file types):

  • iOS (.ipa file)
  • Android (.apk file)
  • Samsung Knox (.apk file)
  • Android Enterprise (.apk file)
  • See also:MDX-enabled private apps

Adding apps downloaded from the Google Play store as enterprise apps is not supported. Add apps from the Google Play store as public app store apps instead. SeeAdd a public app store app.

  1. In the XenMobile console, clickConfigure > Apps > Add. TheAdd Appdialog box appears.

    Apps configuration screen

  2. ClickEnterprise. TheApp Informationpage appears.

  3. 在theApp Informationpane, type the following information:

    • Name:Type a descriptive name for the app. This name is listed under App Name on the Apps table.
    • Description:Type an optional description of the app.
    • App category:Optionally, in the list, click the category to which you want to add the app. For more information about app categories, seeAbout app categories.
  4. ClickNext. TheApp Platformspage appears.

  5. UnderPlatforms, select the platforms you want to add. If you are only configuring for one platform, clear the others.

  6. For each platform you chose, select the file to upload by clickingUploadand navigating to the file location.

  7. ClickNext. The app information page for the platform appears.

  8. Configure the settings for the platform type, such as:

    • File name:Optionally, type a new name for the app.
    • App description:Optionally, type a new description for the app.
    • App version:You can’t change this field.
    • Minimum OS version:Optionally, type the oldest operating system version that the device can run to use the app.
    • Maximum OS version:Optionally, type the most recent operating system that the device must run to use the app.
    • 排除设备s:Optionally, type the manufacturer or models of devices that cannot run the app.
    • Package ID:Unique identifier of your app.
    • Remove app if MDM profile is removed:Select whether to remove the app from a device when the MDM profile is removed. The default is.
    • Prevent app data backup:Select whether to prevent the app from backing up data. The default is.
    • Force app to be managed:If you are installing an unmanaged app, selectif you want users on unsupervised devices to be prompted to allow management of the app. If they accept the prompt, the app is managed.
  9. Configure the deployment rules. For information, seeDeployment rules.

  10. ExpandStore Configuration.

    Apps configuration screen

    • App FAQ:ClickAdd a new FAQ question and answerto create a FAQ for the app.
    • Add screenshots for phones/tablets:Add screen captures that appear in the app store.
    • Allow app ratings:Allow users to rate the app in the app store.
    • Allow app comments:Allow users to leave comments on the app in the app store.
  11. ClickNext. TheApprovalspage appears.

    To use workflows to require approval before allowing users to access the app, see运用工作流. If you don’t need an approval workflow, continue to the next step.

  12. ClickNext. TheDelivery Group Assignmentpage appears.

  13. Next toChoose delivery groups, type to find a delivery group or select a group or groups in the list. The groups you select appear in theDelivery groups to receive app assignmentlist.

  14. ExpandDeployment Scheduleand then configure the following settings:

    • Deploy:选择是否将应用程序部署到设备。default is.
    • Deployment schedule:Choose whether to deploy the appNoworLater. If you selectLater, configure a date and time to deploy the app. The default isNow.
    • Deployment condition:Choose在every connectionto deploy the app every time the device connects. Choose在ly when previous deployment has failedto deploy the app when the device failed to receive the app previously. The default is在every connection.

    TheDeploy for always-on connectionapplies when you have configured the scheduling background deployment key inSettings > Server Properties.

    deployment schedule you configure is the same for all platforms. Any changes you make apply to all platforms, except forDeploy for always-on connection.

  15. ClickSave.

A web link is a web address to an internet or intranet site. A web link can also point to a web application that doesn’t require SSO. After you finish configuring a web link, the link appears as an icon in the app store. When users log on with Secure Hub, the link appears with the list of available apps and desktops.

You can configure web links from theAppstab in the XenMobile console. When you finish configuring the web link, the link appears as a link icon in the list in theAppstable. When users log on with Secure Hub, the link appears with the list of available apps and desktops.

To add the link, you provide the following information:

  • Name for the link
  • Description of the link
  • Web address (URL)
  • Category
  • Role
  • Image in .png format (optional)
  1. In the XenMobile console, clickConfigure > Apps > Add. TheAdd Appdialog box appears.

    Apps configuration screen

  2. ClickWeb Link. TheApp Informationpage appears.

  3. 在theApp Informationpane, type the following information:

    Name:Type a descriptive name for the app. This name is listed under App Name on the Apps table.Description:Type an optional description of the app.App category:Optionally, in the list, click the category to which you want to add the app. For more information about app categories, seeAbout app categories.

  4. ClickNext. TheApp Platformspage appears.

  5. UnderPlatforms, selectOther platformsto add a web app for iOS and Android (legacy DA), or selectAndroid Enterprise. Clear the check box you don’t want to add.

    • If you selectOther platforms, continue to the next step to configure the settings.

    • If you selectAndroid Enterprise, click theUploadbutton to open the managed Google Play store. You do not need to register for a developer account to publish a web app. Click thePlusicon in the lower right corner to continue.

      Create web apps

      Configure these settings:

      • Title:Type the name for the web app.
      • URL:Type the web address for the app.
      • Display:Choose how to display the web app on the user devices. The available options areFull screen,Standalone, andMinimal UI.
      • Icon:Upload your own image to represent the web app.

      Web app configuration screen

      When finished, clickCreate. It might take up to 10 minutes for your web app to publish.

  6. For platforms other than Android Enterprise, configure these settings:

    • App name:Accept the pre-filled name or type a new name.
    • App description:Accept the pre-filled description or type one of your own.
    • URL:Accept the pre-filled URL or type the web address for the app. Depending on the connector you choose, this field may contain a placeholder that you must replace before you can move to the next page.
    • App is hosted in internal network:Select whether the app is running on a server in your internal network. If users connect from a remote location to the internal app, they must connect through Citrix Gateway. Setting this option toONadds the VPN keyword to the app and allows users to connect through Citrix Gateway. The default isOFF.
    • App category:In the list, click an optional category to apply to the app.
    • Image:Select whether to use the default Citrix image or to upload your own app image. The default is Use default.
      • To upload your own image, clickBrowseand navigate to the file location. The file must be a .PNG file. You can’t upload a JPEG or GIF file. When you add a custom graphic, you can’t change it later.
  7. Configure the deployment rules. For information, seeDeployment rules.

  8. ExpandStore Configuration.

    Apps configuration screen

    • App FAQ:ClickAdd a new FAQ question and answerto create a FAQ for the app.
    • Add screenshots for phones/tablets:Add screen captures that appear in the app store.
    • Allow app ratings:Allow users to rate the app in the app store.
    • Allow app comments:Allow users to leave comments on the app in the app store.
  9. ClickNext. TheDelivery Group Assignmentpage appears.

  10. Next toChoose delivery groups, type to find a delivery group or select a group or groups in the list. The groups you select appear in theDelivery groups to receive app assignmentlist.

  11. ExpandDeployment Scheduleand then configure the following settings:

    • Deploy:选择是否将应用程序部署到设备。default is.
    • Deployment schedule:Choose whether to deploy the appNoworLater. If you selectLater, configure a date and time to deploy the app. The default isNow.
    • Deployment condition:Choose在every connectionto deploy the app every time the device connects. Choose在ly when previous deployment has failedto deploy the app when the device failed to receive the app previously. The default is在every connection.

    TheDeploy for always-on connectionapplies when you have configured the scheduling background deployment key inSettings > Server Properties.

    deployment schedule you configure is the same for all platforms. Any changes you make apply to all platforms, except forDeploy for always-on connection.

  12. ClickSave.

Enable Microsoft 365 apps

You can open the MDX container to allow Secure Mail, Secure Web, and Citrix Files to transfer documents and data to Microsoft Office 365 apps. For details, seeAllowing Secure Interaction with Office 365 Apps.

运用工作流

Configure these settings to assign or create a workflow:

  • Workflow to Use:In the list, click an existing workflow or clickCreate a new workflow. The default isNone.

    If you selectCreate a new workflow, configure these settings.

    • Name:Type a unique name for the workflow.
    • Description:Optionally, type a description for the workflow.
    • Email Approval Templates:In the list, select the email approval template to be assigned. When you click the eye icon to the right of this field, a dialog box appears where you can preview the template.
    • Levels of manager approval:In the list, select the number of levels of manager approval required for this workflow. The default is 1 level. Possible options are:

      • Not Needed
      • 1 level
      • 2 levels
      • 3 levels
    • Select Active Directory domain:In the list, select the appropriate Active Directory domain to be used for the workflow.
    • Find additional required approvers:Type the name of the additional required person in the search field and then clickSearch. Names originate in Active Directory.
    • When the name appears in the field, select the check box next to the name. The name and email address appear in theSelected additional required approverslist.

      To remove a person from theSelected additional required approverslist, do one of the following:

      • ClickSearchto see a list of all the persons in the selected domain.
      • Type a full or partial name in the search box, and then clickSearchto limit the search results.
      • Persons in theSelected additional required approverslist have check marks next to their name in the search results list. Scroll through the list and clear the check box next to each name you want to remove.

App store and Citrix Secure Hub branding

You can set how apps appear in the store and add a logo to brand Secure Hub and the app store. These branding features are available for iOS and Android devices.

Before you begin, make sure you have your custom image ready and accessible.

The custom image must meet these requirements:

  • The file must be in .png format
  • Use a pure white logo or text with a transparent background at 72 dpi.
  • The company logo should not exceed this height or width: 170 px x 25 px (1x) and 340 px x 50 px (2x).
  • Name the files as Header.png and Header@2x.png.
  • Create a .zip file from the files, not a folder with the files inside it.
  1. In the XenMobile Server console, click the gear icon in the upper-right corner. TheSettingspage appears.

  2. UnderClient, clickClient Branding. TheClient Brandingpage appears.

    Settings configuration screen

    Configure the following settings:

    • Store name:The store name appears in the user’s account information. Changing the name also changes the URL used to access store services. You typically do not need to change the default name.

      Important:

      The Store name can only contain alphanumeric characters.

    • Default store view:Select eitherCategoryorA-Z. The default isA-Z
    • Device option:Select eitherPhoneorTablet. The default isPhone.
    • Branding file:Select an image or .zip file of images to use for branding by, clickingBrowseand navigating to the file’s location.
  3. ClickSave.