Managed configurations frequently asked questions
Last updated July 19th, 2024
Managed configurations are an app configuration feature developed by Android. They allow you to remotely push configurations to apps. You can use it to perform the same functions as some Knox APIs.
Managed configurations allow you to leverage Knox features as soon as they come out, without extra development work required. We realize that not all developers have the time or resources to develop using Knox SDK APIs, and this is the reason we decided to support managed configuration.
However, we will continue to offer Knox SDK APIs to all of our partners who want to build their own user interfaces and tools. Contact us for more information.
Some Knox features, such as Attestation and E-FOTA, cannot be configured using managed configurations. They can only be configured with Knox APIs.
Managed configurations use the following process:
-
App developers implement logic to support managed configurations in their apps. They define which app settings can be remotely configured in an XML schema file in their Android app. This schema is linked to the app’s manifest file. Once done, app developers push their app to Managed Google Play.
-
MDM developers implement logic to pull the managed configurations schemas from apps on Managed Play. These schemas can then be used to allow IT admins to specify how they want to configure app settings. After the IT admin saves their configuration, the MDM pushes the configuration to Managed Google Play.
-
Once an app configuration is updated and pushed to Managed Google Play, the app is updated on all applicable devices to reflect the new configuration.
Yes, Samsung’s Knox Service Plugin uses managed configurations and Android’s new OEMConfig to enable enterprise customers—through the use of their chosen MDM partner console—to deploy Knox Platform for Enterprise features as soon as they are commercially available. This automatic deployment method ensures that IT admins can use the latest Knox features on the day it is launched, instead of waiting for their MDM to specifically integrate the features.
For more information on the Knox Service Plugin and how it works, see the Knox Service Plugin Admin Guide.
The XML schema is a file that lists an app’s configurable parameters. It can be loaded into an iframe to render the configurable parameters as a form that IT admins can fill out with their desired app settings.
You can see schemas for Samsung Apps on our Knox Service Plugin and Samsung Email pages.
Currently, Knox Authentication Manager, Knox Capture, Knox Service Plugin, Samsung Email, and Separated Apps provide support for managed configurations.
Please see Deploy Managed Configurations for instructions that guide you through this process.
You can see schemas for Samsung Apps on our Knox Service Plugin and Samsung Email pages.
To load the schema to an iframe on your MDM app, pull it down from Google Play. You can find more details on how to do this in Deploy Managed Configurations.
For general steps, see Deploy Managed Configurations.
The new Galaxy Note10 is preloaded with either the Samsung Email or Microsoft Outlook app, depending on your region and carrier.
You can change the preloaded app as follows:
- Remove or hide the currently preloaded app from the new devices.
- Provision your preferred Email app from Google Play to those devices.
- Apply the required email policies.
Is this page helpful?