IBM MaaS360

SCEP certificate management and deployment.

Supports importing .mobileconfig profiles for both iOS/iPadOS and macOS devices. Windows custom configuration is more limited. Enables deployment of vendor-specific or advanced Apple payloads.

Device restrictions and capability enforcement.

Email configuration for native and managed clients.

Passcode policies with complexity enforcement.

Per-app VPN supported for iOS via VPN policy configuration. May require MaaS360 Enterprise Gateway or app wrapping depending on deployment model. Android and Windows per-app VPN not supported.

Device-wide VPN configuration supported.

Wi-Fi profile deployment across platforms including ChromeOS.

Android Zero Touch Enrollment supported.

Apple Device Enrollment Program support for iOS and macOS via Apple Business Manager. Automated enrollment with profile assignment during device setup.

Apple Configurator enrollment supported for iOS bulk staging. CSV device import for pre-registration. Android bulk enrollment via NFC bump and QR codes for dedicated devices.

Conditional enrollment based on device/user attributes.

QR code enrollment available across supported platforms.

Samsung Knox integration for enhanced device management.

BYOD support with MaaS360 Container for secure app management.

Windows Autopilot supported for zero-touch Windows enrollment.

App restriction and blocklist policies.

Managed app catalog with self-service portal.

App configuration policies for iOS and Android.

VPP support for iOS only.

Google Play for Work app management.

Mobile Application Management via MaaS360 Container.

Silent app deployment and automatic updates.

Win32 application deployment on Windows.

Compliance engine with real-time policy enforcement.

DLP not natively available.

Device encryption enforcement.

Geofencing not natively available.

Jailbreak and root detection enforcement.

Full device wipe capability.

Selective Wipe available across iOS, Android, Windows, and macOS per IBM device actions documentation. Removes corporate data and managed apps while preserving personal content on BYOD devices.

Watson AI Advisor with threat detection analytics.

Android updates OEM-dependent; policy recommendations only.

Firmware updates not supported.

iOS update management with deferral options.

macOS update management.

Update deferral available on iOS, Windows, macOS.

Windows update management and deferral.

App deployment and usage analytics.

Audit logging for admin actions and policy changes.

Compliance status and remediation reporting.

Custom report builder for ad-hoc analysis.

Fleet inventory and status dashboards.

Real-time device status visibility.

Limited custom scripting; Windows batch support only.

Remote restart available for Windows devices.

Remote device lock across platforms.

Remote support via TeamViewer integration for Android remote view/control, Windows, and macOS. iOS remote view available through TeamViewer but limited by Apple platform restrictions. Requires TeamViewer licensing.

Remote terminal not available.

Remote wipe and selective data removal.

Device type filtering for policy assignment.

Dynamic groups based on device attributes.

Geographic/network targeting not available.

Tag-based device targeting and policy assignment.

User and device group-based policy targeting.

Entra ID integration via standard protocols.

Basic conditional access via policy rules; not as sophisticated as Intune.

Google Workspace for ChromeOS enrollment.

Third-party IdP support via SAML.

On-premises AD not directly supported.

SAML and OpenID Connect identity federation.

Limited workflow automation; basic event triggers only.

No plugin framework available.

REST API available for device and policy management.

ServiceNow integration available.

QRadar SIEM native integration (IBM advantage).

Limited webhook support; basic event notifications only.