Creating the Before Login Lockdown Profile for the Parent Device Group

Before you begin

This feature is for Android Enterprise work managed devices only.

Ensure you have configured Microsoft Authenticator and Single Sign-on (SSO). See Single Sign-On (SSO) For Shared Devices Using Microsoft Authenticator.

About this task

Use this procedure to create a profile with a login button for the parent device group.

Procedure

  1. From the main menu, select Profiles. The Profiles window opens.
  2. Select New Profile. The Add Profile window opens.
  3. Select Android > Work Managed. The Create Profile window opens.
  4. From the General tab, give a Profile Name.
  5. Select the Configurations tab.
  6. Select Add. The Add a Configuration window opens.
  7. From the Restrictions panel, select Lockdown.
  8. Select Add Home Screen Items.
    Options for adding a home screen item
  9. Give the following information.
    Display Name Enter a name for the login button (for example, Login).
    Actions Select shared-device://.
    Package Name or URL Enter an asterisk (*).
    Use Custom Image Optional: Use a custom image with this home screen item. Select from a list of existing images or upload a new one.
    Launch Automatically on Start-up Turn this option off.
  10. Select Add.
    The list displays the new home screen item.
  11. Optional: From Preview Settings, define device details to see how the profile appears on a device.
    Device Manufacturer Select a manufacturer to decide the device skin used.
    Device Model Define the skin further by device model.
    Home Screen Layout Template Select a pre-defined lockdown menu template for the device.
  12. Select the type of device control lockdown.
    Lockdown Type Choose either Native or Activity Suppression as your lockdown type.

    Native prevents applications from launching or running in the background unless explicitly allowed by the active Lockdown policy.

    Activity Suppression moves all undesired activities from the foreground to the background of the device where users can not access them.
    Home Button When enabled, a home button is visible on the Lockdown home screen. On Android 9.0 and later, the home button is the native Android home button. On Android 8.0 and earlier, it appears as a floating home button.

    This option is visible when Native is the selected Lockdown type.
    System Information When enabled, the device status bar displays system information such as time, data, and battery level.

    Supported on Android 9.0 or later.

    This option is visible when Native is the selected Lockdown type.
    Native Notifications When enabled, notifications for authorized applications appear on the device. Notifications include notification icons in the status bar and heads-up notifications. Device users can also pull down the notification shade to see more information and interact with the notification.

    Supported on Android 9.0 or later.

    This option is visible when Native is the selected Lockdown type.
    Notification Sound When enabled, notification sounds play even if you disabled notifications.

    Supported on Android 9.0 or later.
    Recents Button When enabled, the Recent apps button displays.

    Supported on Android 9.0 or later.

    This option is visible when Native is the selected Lockdown type.
    Keyguard When enabled, device users have access to the keyguard (the unlocking mechanism for the device). Supported on Android 9.0 or later.
    Note: The Allow All Keyguard Features feature control option supersedes this setting.

    This option is visible when Native is the selected Lockdown type.
    Power Menu When enabled, device users have access to the Power menu (the options that appear when a device user long presses the power button). Supported on Android 9.0 or later.

    This option is visible when Native is the selected Lockdown type.
    Full Device Lockdown When enabled, it applies lockdown mode in its strictest form. It disables all other Lockdown Settings (such as access to Home Button, Recents Button, Keyguard and more). Supported on Android 9.0 and later.

    This option is visible when Native is the selected Lockdown type.
    Allow Status Bar Expansion When enabled, the device user can expand the status bar.

    This option is visible when Activity Suppression is the selected Lockdown type.
    Revert to Kiosk Mode When enabled, the device reverts to kiosk mode after a specified timeout in minutes during non-kiosk use.
  13. Optional: Select the Speed Control tab. Select Speed control and complete the following:
    1. Select Add to add a home screen item to the lockdown profile configuration.
      Note: Device Control and Speed Control home screen items are entirely separate. To use the same home screen items for Device Control and Speed Control, you must enter the same information in both places.
    2. From Preview Settings, define device details to see how the profile appears on a device.
      Device Manufacturer Select a manufacturer to decide the device skin used.
      Device Model Define the skin further by device model.
      Home Screen Layout Template Select a pre-defined lockdown menu template for the device.
    3. From Advanced Speed Control Settings, set the following as required:
      Activation Time Specify the starting time each day when you want speed control to become active on the device.
      Deactivation Time Specify the ending time each day when you want speed control to become inactive on the device.
      Speed Control Starts At Enter the speed to trigger speed control and the measurement unit.
      Note: When the device travels at or faster than this speed, speed lockdown does not apply until the time specified in the Engage Timer field expires.
      Engage Timer Enter the time (in seconds) the device travels at or faster than the threshold speed before the speed lockdown applies. This delay helps prevent the excessive application of speed lockdown.
      Disengage Timer Enter the time (in seconds) the device travels below the threshold speed before removing the speed lockdown. This delay helps prevent the excessive removal of speed lockdown.
      Scripts Set scripts to activate when a device enters or exits speed control. To add a new script, select Scripts to open the Manage Scripts dialog box.
      Speed Control is Activated Select the script to execute on the device when the speed lockdown applies.
      Speed Control is Deactivated Select the script to execute on the device when removing the speed lockdown.
  14. Select the Template tab. Select from one of the following options:
    Note: Templates are HTML files governing how home screen items display devices in lockdown mode. You can use one of the SOTI MobiControl provided templates or create your own.
    1. From Pre-defined Templates, select a prepared template. You may preview the template in the right-hand panel.
    2. To create a new custom template, select Add. The Lockdown: Custom Templates dialog opens.

      Edit, duplicate, or delete your custom templates. You can also upload an HTML template file to SOTI MobiControl. Select Import Template, then browse to the HTML file on your computer. Select Import.

      For more information on custom templates, see Customizing Lockdown Menu Templates.

  15. Select Save.
  16. Complete the profile and select Save and Assign.
  17. Select the parent device group and select Assign.
    Note: The profile applies to the parent device group and all the child device groups below it.

What to do next

Complete the steps in Creating After Login Working Profiles (with Logout Action) for Child Device Groups to create the working profile.