How to apply Managed App Configuration into the app installed via Declarative Device Management?

Question

yusuke-iwaki OP

Created Jul ’24

Replies 1

Boosts 0

Participants 2

We want to set key-value pair (installation_token: xxxxx) into an app installed by MDM.

Formerly we could set the key-value using Settings MDM command like this.

<dict>
	<key>Command</key>
	<dict>
		<key>RequestType</key>
		<string>Settings</string>
		<key>Settings</key>
		<array>
			<dict>
				<key>Configuration</key>
				<dict>
					<key>installation_token</key>
					<string>xxxxxxx</string>
				</dict>
				<key>Identifier</key>
				<string>com.cloudflare.cloudflareoneagent</string>
				<key>Item</key>
				<string>ApplicationConfiguration</string>
			</dict>
		</array>
	</dict>

We can still use this for the apps installed withInstallApplication MDM command, however we cannot apply this configuration into the app using Declarative Device Management. When we try it, we got an error like this.

<dict>
	<key>CommandUUID</key>
	<string>.............</string>
	<key>Settings</key>
	<array>
		<dict>
			<key>ErrorChain</key>
			<array>
				<dict>
					<key>ErrorCode</key>
					<integer>12008</integer>
					<key>ErrorDomain</key>
					<string>MDMErrorDomain</string>
					<key>LocalizedDescription</key>
					<string>Could not modify apps managed by Declarative Device Management.</string>
					<key>USEnglishDescription</key>
					<string>Could not modify apps managed by Declarative Device Management.</string>
				</dict>
			</array>
			<key>Identifier</key>
			<string>com.cloudflare.cloudflareoneagent</string>
			<key>Item</key>
			<string>ApplicationConfiguration</string>
			<key>Status</key>
			<string>Error</string>
		</dict>
	</array>

How can we work with managed application configuration with DDM?

Boost

Answer 1

Device Management Engineer OP

Apple

Jul ’24

MDMv1 app config is not compatible with DDM managed apps. We recognize this is an important feature in MDMv1 app management, and obviously intend to provide an equivalent solution for DDM at some point.

If there are specific use cases that you feel are unique to your situation, or you have suggestions on how the MDMv1 app config mechanism could be improved via DDM, please file a feedback request.

0