Shared iPads

In today's dynamic work and educational environments, maximizing device utilization while ensuring personalized experiences is paramount. Shared iPad, a feature that allows multiple users to seamlessly share a single iPad while maintaining individual settings and data, addresses this need. Originally conceived for educational settings, its applicability extends significantly into the business world.

This article will explain how Scalefusion empowers administrators to designate and manage their iPad devices as Shared iPads, unlocking a new level of flexibility and efficiency.

Pre-Requisites

1. You should have a managed Apple ID

2. ADE/DEP Setup should be done on Scalefusion Dashboard

3. On Scalefusion Dashboard, device should be displayed in ADE/DEP section. In other words, server assigned via ABM/ASM

4. Supported OS: iPadOS 13.4 or later

Configuring Shared iPad Settings

Shared iPad settings can be configured in two ways:

1. Global Level

2. Profile Level

Configure Shared iPad Settings at Global Level

1. On Scalefusion Dashboard, navigate to Getting Started > Apple Setup > ADE/DEP.

2. Click on Configure Device Setup Settings
   

   

   
   

3. Navigate to Configure default settings for ADE devices > Basic Configuration and toggle on the setting Enable Shared iPads
   

   

   
   

4. Now scroll down and navigate to Configure Shared iPad Settings. Expand this section and configure the following settings:

   1. User Configuration: Configure how many users are allowed to use the Shared iPad. When the maximum user limit is reached, the oldest user's data will be removed. Note: This setting cannot be changed after the device is enrolled. Choose one of the following options:

      1. Use Default Settings: Settings recommended by Apple

      2. Use Custom Settings: Configure the following sub-settings.

         1. Sharing based on Maximum users: set the maximum number of users that can be stored on a device at one time. It can be from 1 to 20. For example, if you specify a value of five users on a 128GB iPad, each user will get approximately 20.4GB of local storage

         2. Sharing based on Maximum space per user: specify the maximum storage (in MB) allocated for each user. It can be from 1024-10000

   2. Allow Guest Sessions: If enabled, a temporary session gets created on a shared iPad is that allows users to sign in without a password or Managed Apple ID. All user data is deleted when the user signs out.

      1. Guest Only:

      2. Inactive Guest session timeout: Specify the inactivity time (in seconds) after which a guest user's session automatically ends. It can be between 30 - 14400

   3. Inactive User session timeout: Specify the inactivity time (in seconds) after which a user's session automatically ends. It can be between 30 - 14400

   4. Grace period for online authentication: This setting defines the number of days (0 to 10) a user can log in to a Shared iPad locally before online authentication is required. Administrators can specify this grace period to provide temporary offline access. This setting is useful if the iPads are not always online, but are sometimes offline or on the intranet.

   5. Auto Lock Time: Specify the amount of time (in seconds) a device will remain idle before automatically locking the screen. It can be between 120 - 14400 seconds.

   6. Passcode Lock Grace Period: Specify the timeframe (in seconds) a user can unlock the device without entering a passcode. Following are the options to choose from:

      1. Not Configured,

      2. 60,

      3. 300,

      4. 900,

      5. 3600,

      6. 14400

   7. Skip Language & Locale Setup for New Users: With this setting enabled, when a new user logs in on the device, they will not be prompted to select their preferred language and region settings, instead, the system will automatically use the pre-configured language and location settings set by the administrator for the shared iPad.

   8. Add Domain: The domains you add here will be the default domains displayed on login screen of iPad. Maximum of three domains can be added here.

5. After configuring settings, click Save
   

   

Configure Shared iPad Settings at Profile Level

1. On Scalefusion Dashboard, create a new iOS device profile (Company Owned) or edit an existing one.

2. Navigate to Restrictions > Shared iPad Settings

3. Here, enable the setting Override Global Shared iPad Settings. Rest of the settings will become configurable on enabling this setting.

   These settings will override the Shared iPad settings you have configured globally.

How Shared iPads work

1. On a new iPad device enrolled via ADE, enter your managed Apple Id and click Sign In
   

   

   
   

2. Select domain (if configured in settings)

3. Enter your Apple Id passcode. You will see the Getting Ready screen (for verification)

4. Once verified, you will get the screen to select Language.

5. User will be logged in with apps etc. showing up as per profile applied. The logged in user’s name will display on the top left of the screen.
   

   

   
   

6. To switch to a different user, click on Sign Out and select another user with which you want to login. The data of the current logged in user will be saved.
   

   

Shared iPad Users’ Details on Dashboard

The user details can be seen in Devices > User Accounts section:

1. On Scalefusion Dashboard, navigate to Devices Section

2. Click on the device configured as Shared iPad. This will take you to the Device Details page.

3. Scroll down and click on User Accounts tab. Here, you will get the details like Total Users on the device, list of users, current logged in user etc.

4. You can also perform additional actions over each user:

   1. Logout: This will be enabled only if the user is currently logged in.

   2. Delete User: Deleting user will remove the user and their data from the Shared iPad

   

Leveraging Shared iPad Capabilities with Scalefusion Integrations

Once you have configured iPads as Shared iPads using Scalefusion, you can seamlessly integrate them with a wide range of Scalefusion features to enhance management, security, and user experience. Explore the following related features:

1. User Activity Monitoring:

   1. Screen Time Reports: Gain insights into user activities and login attempts on Shared iPads, providing valuable data for usage analysis and compliance.

2. Group-Based Management:

   1. User Group Settings: Efficiently apply and manage Shared iPad configurations across user groups, ensuring consistency and streamlined administration.

3. Enhanced Security and Connectivity:

   1. Veltar Integration: Secure network access and web traffic on Shared iPads with Veltar's VPN and Secure Web Gateway.

   2. OneIdP SSO: Simplify user authentication with Single Sign-On, providing seamless access to applications and resources.

4. Workflow and Control:

   1. Maker Checker: Implement a robust approval workflow for actions performed on Shared iPads, ensuring accountability and preventing unauthorized changes.

5. Configuration Management:

   1. Profile Versioning: Track and manage changes to your Shared iPad profiles with a detailed version history, facilitating efficient troubleshooting and auditing.

   2. Custom Configuration: Deploy custom settings and configurations to Shared iPads using an integrated XML editor.

6. User Experience and Application Management:

   1. Branding and App Order: Personalize the Shared iPad experience with custom branding and control the app layout to enhance usability.

   2. App Management: Deploy and manage VPP and enterprise applications on Shared iPads, ensuring users having access to the necessary tools.

7. Device Tracking and Security:

   1. Location and Geofencing: Utilize location tracking and geofencing capabilities to monitor and secure Shared iPads, enhancing device security and accountability.

Known Behaviors

1. App Store Installation Restrictions: Users cannot directly install applications from the App Store on Shared iPads.

2. User-Based Policy Dependency: User-specific policies require users to be registered as organizational users within the Scalefusion Dashboard.

3. Account Synchronization Delays: If estimated user accounts are created and data synchronization is pending, new users cannot log in until synchronization completes or an administrator removes the account from the Scalefusion Dashboard.

4. Limited Password Policy Enforcement: Password complexity policies cannot be enforced directly from the Scalefusion Dashboard.

5. Federated IDP Authentication After Password Reset: If a user's password is reset through Apple Business Manager (ABM) or Apple School Manager (ASM), the user must complete authentication through the federated Identity Provider (IDP) configured within ABM/ASM.