Distribute Apps + Updates (iOS + Android) via SMC without any local account on the device
How it should work:
Install the Sophos Mobile Control App on the device (on iOS you can do this without any account on the device via iTunes, on Android you need an account => it should be possible to delete this account on the device after installing SMC-App).
Register your device in SMC.
Distribute your profiles, policies,... AND Apps.
This should also work on updates. The User shouldn't have to do anything on the device on installation or update. SMC should set the rights so, that the installation or update is possible and if finished, go back to the right befor the installation (how it was in the users policy). If an iTunes or Google account is nessesary for this process it should be possible to save the data to the SMC so that the SMC can use them only. We dont want any accounts on the device!
In SME 7.23.4 was a problem with the signature of the mails. Now we want zu update our devices to 7.26.4. This is not that funny without an iTunes account on the device (need to connect every device to the local itunes).
Happy to hear from you!
The requirements of this requests can be implemented. The use case looks like corporate phones. Apples recommendation for this use case are supervised phones, best enrolled via Apple DEP (also check conditional provisioning of DEP devices). This allows
- Sophos Mobile to enforce OS upgrades
- Push all apps silently to the device
- For paid apps use VPP with device accounts (not users)