[ipad] Automatic profile installation on join of wireless network

[caffrey]

Does such a thing exist or have I been thinking too hard ?

 

BYOD, person brings device in, connects to wifi and has to accept a standard profile which is automagically installed once joined, when they leave the SSID the profile is removed.

[SovietRussia]

Some sort of portal page on the WiFi to redirect them to a .mobileconfig url, which would then get them to install the profile.

 

Removal on disconnect though would not be possible - You can set a profile to expire though (Time)

[caffrey]

Do any MDM's do this ? I'm sure I've seen this somewhere

[Brimstone]

Do any MDM's do this ? I'm sure I've seen this somewhere

 

 

This is geofencing and very few MDM's (apart from Airwatch) can do this, the only alternative is to use a timed profile expiry as said.

[seawolf]

There are quite a few MDM systems that can do Geofencing (not just AirWatch), including Meraki, Maas360, Absolute Manage, and AirWatch to name a few. Our MDM system (Casper Suite) does not have Geofencing, but we can scope profiles to be removed if the IP address of the device is not one of our LAN IP addresses. This can take up to 24 hours, but does the job. If your MDM system can scope profiles in such a manner then you can achieve what you want even without geofencing. Geofencing is a nice feature though, and I hope JAMF add it in the near future.

 

https://meraki.cisco.com/blog/2013/09/geofencing-a-useful-way-to-corral-your-devices/

Mobile Device Management - Award Winning MDM Solution - MaaS360 | MaaS360 by Fiberlink

https://www.absolute.com/en/resources/videos/product/geofencing

[caffrey]

Thanks all, gives me something to think about.