IBM MaaS360

Wi-Fi and VPN profile management for iOS, Android, Windows, and macOS with per-app VPN options.

Managed email configuration with MaaS360 Mail client containerisation and Exchange ActiveSync.

Standard restriction profiles for camera, screenshots, app installations, and OS-specific controls.

Custom configuration profile upload for Apple devices; Android custom configurations via managed app config.

Kiosk mode for iOS and Android with single-app lockdown and MaaS360 kiosk browser.

Apple DEP/ADE support through Apple Business Manager with supervised enrollment for iOS and macOS.

Supports Android Zero-Touch Enrollment and Samsung KME for automated device provisioning.

Windows Autopilot support with basic deployment profiles for cloud-based Windows provisioning.

Bulk enrollment via QR code, email invitation, and Apple Configurator support for staging.

BYOD enrollment with Bring Your Own app and Android Work Profile; containerisation for personal device privacy.

App catalog with store app deployment; managed Google Play integration for Android Enterprise.

Enterprise app hosting with IPA and APK deployment; Windows LOB app support via MSI.

VPP support through Apple Business Manager with license assignment and basic tracking.

App configuration via managed app settings; MaaS360 SDK for deeper app-level controls.

MaaS360 App Catalog with limited customisation for end-user self-service app installation.

Standard compliance policies with Watson-powered compliance insights and automated actions.

Conditional access through compliance-driven policies and gateway integration for corporate resources.

Encryption compliance checking and enforcement; limited key escrow compared to leaders.

Certificate management with SCEP proxy and manual certificate deployment.

Watson-powered threat management with MaaS360 Advisor for security insights and recommendations.

OS update policies for iOS scheduling and Android firmware management; Windows updates via WSUS proxy.

Basic patch awareness; Windows patching limited to OS update scheduling.

Basic iOS update deferral; limited Windows update staging capabilities.

Selective and full wipe with device unenrollment and inventory cleanup.

Watson Advisor provides lifecycle insights; device inventory with hardware lifecycle attributes.

Watson-powered advisor dashboard with AI-driven insights and fleet health analytics.

Custom report creation with filters and scheduling; limited compared to enterprise leaders.

Device inventory with hardware specs, installed apps, and Watson-powered app analytics.

Basic audit logging with admin actions and device command history.

Device status with last check-in, battery, and location; Watson Advisor adds health insights.

Remote lock and wipe with selective wipe option; basic restart capabilities.

Remote screen sharing via MaaS360 for Android; TeamViewer integration for cross-platform remote support.

Limited remote command capabilities; basic script deployment for macOS.

MaaS360 end-user portal with device status and limited self-service capabilities.

MaaS360 Docs for document distribution and content management on managed devices.

Device groups with rule-based membership; limited dynamic criteria compared to leaders.

Basic group-based policy assignment; limited tag/label functionality.

Basic geofencing with location-based compliance rules and boundary alerts.

Basic scheduling for compliance checks; limited time-based policy options.

Single policy per device in recent versions; limited multi-policy support and layering.

Azure AD integration for user sync and basic conditional access support.

SAML-based SSO with Okta and third-party IDP support; Google Workspace sync.

On-premises AD connector for user/group sync with directory-based device assignment.

Basic certificate-based authentication with SCEP proxy for certificate deployment.

User-device affinity with directory-synced user mapping and per-user reporting.

REST API for device management and reporting; documentation quality varies.

Limited webhook capabilities; event streaming for select device lifecycle events.

Native QRadar SIEM integration; syslog forwarding for third-party SIEM platforms.

ServiceNow integration for CMDB sync; IBM ecosystem ITSM tool connectivity.

Basic script deployment capabilities; limited custom scripting options.