• Documentation

What are the AppConfig settings for my MDM?

These are the security controls you can configure for your users' devices using your AppConfig-supported Mobile Device Management (MDM) solution:

  • Restrict users from logging in with an account outside of your organization (iOS and Android)

  • Prevent users from cutting, copying, and pasting (iOS)

  • Restrict data upload and sharing to other devices (iOS)

  • Specify an external browser for authentication (iOS)

  • Force users to verify their identity (iOS)

Looking for more features? Learn where to configure additional security controls

To configure these controls for Atlassian mobile cloud apps, navigate to the App Config section of your MDM. Check the documentation for your MDM for more information.

The tables below illustrate the configurations you’ll need to follow to set each security control. After you save these settings, the updates will be sent in a single payload to your users' devices.

 

Restrict users from logging in with an account outside of your organization

Key

Value type

Description

atlassian.devicePolicyLoginAccount

String

Restrict users from logging in to Atlassian mobile apps with any account other than the email address you specify.

For the correct email address syntax, refer to the documentation for your MDM. For example: ${USERNAME}@example.com or ${LOGINNAME}

Once this setting is sent to a user’s device, they’ll be logged out of all other accounts automatically.

 

Prevent users from cutting, copying, and pasting

Key

Value type

atlassian.devicePolicyClipboardRestriction

Integer

Valid values are:

Value

Description

0

Set the value to 0 for unrestricted clipboard use. This means users can cut, copy, and paste all data from Atlassian mobile apps to other apps on their device.

1

Set the value to 1 to restrict clipboard data to use within that app. This prevents users from cutting, copying, and pasting data from Atlassian mobile apps to other apps.

Setting any value other than 0 or 1 will cause undefined behavior.

 

Restrict data upload and sharing to other devices

Key

Value type

Description

atlassian.devicePolicyDataExportRestricted

Boolean (true/false)

Set the Boolean value to trueto prevent data from being:

  • Backed up to iCloud

  • Uploaded to iTunes

  • Shared to other devices with the iOS share sheet

Specify an external browser for authentication

Key

Value type

Description

atlassian.devicePolicyLoginBrowser

String

Specify the browser to use for authentication instead of the built-in application browser.
To force users to log in with the Microft Edge browser:
1. Enter edge in the value for this key in the app config

Force users to verify their identity before using Atlassian mobile apps

Key

Value type

Description

atlassian.devicePolicyLocalAuthRequired

Boolean (true/false)

Set the Boolean value to true to require users to verify their identity using Touch ID, Face ID, or a passcode before using the app.

atlassian.devicePolicyLocalAuthTimeout

Integer (number greater than zero)

Enter a number in seconds (for example 100) to define the time that the app can be open but not in use (in the background), before a passcode is required again.

The default timeout is 120 seconds if you don’t set a value.

 

Here’s an example of what this might look like if your organization uses Microsoft Intune:

Screenshot of what AppConfig settings look like in Intune

See an example of how this looks as a JSON string

Still need help?

The Atlassian Community is here for you.