Version Information
Scalefusion Dashboard: v68.4.0
Scalefusion Android MDM Agent: v23.0.0
Scalefusion iOS MDM Agent: v5.0.0
Scalefusion macOS MDM Agent: v6.6.0
Scalefusion Windows MDM Agent: v17.3.0
Release Notes
OneIdP RADIUS enables organizations to secure corporate Wi-Fi and VPN access by authenticating users with their Identity Provider (IdP) credentials or certificates. This helps eliminate static Wi-Fi credentials and restricts access to devices with valid certificates, where certificate-based authentication is configured.
Key capabilities:
a. Multiple Authentication Methods: OneIdP RADIUS supports EAP-TLS, EAP-TTLS, PEAP (MS-CHAP v2), MS-CHAP v2, and PAP, with the available methods depending on the operating system and its support.
b. Multi-Factor Authentication (MFA): Administrators can enforce additional authentication using OneIdP MFA or third-party MFA configured through OneIdP.
c. Enterprise Wi-Fi Authentication: Administrators can configure Enterprise Wi-Fi through MDM payloads. The sign-in interface is controlled by the device operating system. When MFA is enabled, users must enter the MFA information in the username field after their username, as the operating system does not display a separate MFA input field.
d. VPN Authentication: RADIUS can also secure VPN access with supported VPN clients. VPN configuration is managed through the VPN application's configuration settings, and the sign-in interface is controlled by the VPN application.
e. Independent Deployment: OneIdP RADIUS can be used independently of Scalefusion UEM when MFA is not configured, allowing organizations using other MDM/UEM solutions to leverage OneIdP for Wi-Fi and VPN authentication.
f. Microsoft ROPC Identity Provider Support: OneIdP supports Microsoft's legacy Resource Owner Password Credentials (ROPC) protocol as an Identity Provider for RADIUS authentication. ROPC has been marked for deprecation and end of life by Microsoft. It is not compatible with SAML-based federation and is intended for organizations using RADIUS alone or RADIUS alongside Microsoft SSO through OpenID Connect (OIDC).
Geofencing now supports configuration based on country, state, city, and postal code (ZIP/Pin Code). IT administrators can define geographic boundaries using these location details without specifying an exact location.
Key details:
a. Platform Support: Advanced geofencing is supported on Android, iOS, Windows, and macOS devices running the latest Scalefusion agent release.
b. Flexible Location Entry: City and ZIP/Pin Code values support free-text entry when Scalefusion cannot validate the location in all cases. Administrators can select a suggested city and edit the value as needed.
c. Recommended Configuration: Administrators should monitor the location reported by a device before configuring a state-, city-, or postal-code-based geofence. Reported location names may differ from commonly used names, such as Poona and Pune.
3. Android Enhancements
a.Custom FOTA Support for Chainway and Newland Devices
IT administrators can now deploy OS/OTA updates to Chainway and Newland devices using the Android Custom FOTA option in the Android FOTA section.
b.Zebra Battery Information Reporting
IT administrators managing supported Zebra devices can now access additional battery information to help monitor battery condition and assess when replacement may be necessary.
The reported information includes:
a. Part number, serial number, and manufacture date.
b. Battery health percentage.
c. Battery decommission status.
d. Battery usage decommission threshold, configurable through the profile and set to 400 by default.
e. Battery percentage decommission threshold, configurable through the profile and set to 75 by default.
Note: Battery information reporting is supported only on Zebra devices equipped with PowerPrecision or PowerPrecision+ batteries, not all Zebra devices. Battery replacement decisions are left to IT administrators based on the data provided by Zebra APIs.
c.Remote Scanner Configuration for Chainway and Newland Devices
New remote commands are available to configure scanners on Chainway and Newland devices, enabling IT administrators to manage scanner settings remotely.
4. macOS Enhancements
Device Time Zone-Based DDM Enforcement
The DDM enforcement timeline now follows the device's time zone rather than the administrator's time zone. For example, if an administrator configures enforcement for 4:00 PM, enforcement is scheduled for 4:00 PM according to the end user's device time zone.
5. Bug Fixes
Android
a. Fixed an issue that prevented a device from being factory reset while it was on the lock screen.
b. Fixed an issue that prevented the Scalefusion Password Reset screen from appearing on the lock screen.
Team
Team Scalefusion