Scalefusion January 3rd, 2025 Release Notes

Version Information:

• Scalefusion Dashboard: v57.3.1

• Android MDM Agent: v17.1.3

• macOS MDM Agent: v4.6.7

• Windows MDM Agent: v15.9.2

Release Notes:

Enhanced BitLocker Management via Agent

We have introduced enhanced BitLocker management capabilities via the Scalefusion agent, providing IT administrators with greater control and flexibility compared to traditional modern management methods. Some of the new features it offers are as follows:

1. Expanded Device Support: Enforce BitLocker encryption even on devices not joined to Entra ID (formerly Azure AD).

2. Boot PIN/Password Management: Configure options to bypass the requirement for a PIN or password at device boot, ensuring encryption while minimizing user disruption and potential issues related to forgotten credentials.

3. Secondary Drive Management: Choose to encrypt secondary drives and automatically unlock them after boot.

4. Static Recovery Key Encryption: Option to encrypt drives using a static recovery key.

5. Automatic Re-encryption: Automatically re-encrypt drives if users manually attempt to decrypt them, ensuring continuous compliance and security.

6. Encryption Type Selection: Configure either full-drive encryption or used-space-only encryption directly from the Scalefusion dashboard.

7. Enhanced Key Management: Administrators now have access to both recovery keys and user-configured PINs and passwords.

8. Comprehensive Feature Set: This new agent-based approach aims to provide parity with the encryption options available through modern management.

User Management & OneIdP Enhancements

1. Improved Username Handling:

   1. Username Choice During Import: When importing users from external identity providers (IdPs), administrators can now choose to set the username based on the email address prefix (e.g., user.name from user.name@domain.com). This provides more control over usernames compared to the previous approach based on first and last names.

      Note: This setting does not affect previously imported users.

   2. Importing First & Last Names: Scalefusion now imports first and last names from Google Workspace (GWS) and Entra for user profiles, allowing administrators to edit them as needed.

2. Simplified User Enrollment & Login:

   1. Username Login: To streamline user enrollment and login, users can now utilize their usernames for the following:

      • Device enrollments on all platforms

      • Online login via Keycard

      • Online login on shared Android devices

   2. Compatibility: This login flow works for users imported from GWS/Entra, manually added users, and OneIdP directory users.

   3. Multiple Username Scenario: If multiple users within the same organization share the same username, an error message will be displayed indicating the need to use the full email address for enrollment/login.

3. Display Name & Local Account Management:

   1. Keycard Display Name: Keycard now sets the local account display name based on the users imported or dashboard-configured first and last names.

   2. Windows Local Account Tagging: All Keycard-managed accounts will have an additional tag (Managed by Scalefusion)

4. Enhanced GWS User Management:

   1. Automatic User Provisioning/Deletion: IT administrators utilizing GWS SSO can now configure additional user management options. Users can be automatically created in Scalefusion upon creation in the OneIdP directory, and deleted from Scalefusion upon removal from OneIdP.

Team:

• Team Scalefusion