Omnissa Workspace ONE

Comprehensive Wi-Fi and VPN payload management including per-app VPN via Tunnel, certificate-based authentication, and proxy profiles.

Full Exchange ActiveSync and managed email account deployment with Boxer email client and S/MIME certificate support.

Extensive restriction profiles across all platforms with 200+ configurable restrictions including USB, camera, screenshots, and app policies.

Full custom profile support including OMA-URI for Windows, custom XML for Android OEMConfig, and Apple plist/mobileconfig payloads.

Full single-app and multi-app kiosk for iOS, Android, and Windows with Launcher for Android and Guided Access for iOS.

Full ADE support for iOS/iPadOS and macOS with prestage enrollment customisation and skip-screen controls via Apple Business Manager.

Full Android Zero-Touch Enrollment and Samsung KME support with Work Managed and Work Profile deployment options.

Windows Autopilot support with drop-ship provisioning; also offers Workspace ONE Drop Ship Provisioning as an alternative.

Comprehensive staging with QR code, NFC, barcode, token, and CSV-based bulk enrollment across all supported platforms.

Intelligent Hub app provides polished BYOD enrollment with Android Work Profile and iOS User Enrollment with privacy separation.

Silent app installation from all major stores with Workspace ONE UEM app catalog and managed Google Play integration.

Full enterprise app deployment for IPA, APK, MSI, DMG, PKG, and EXE with versioning, assignment rules, and delivery optimisation.

Full VPP/ABM integration with device-based and user-based licensing, automatic license reclamation, and managed distribution.

Full AppConfig and Android managed configuration support with key-value pairs, app tunnelling, and per-app VPN settings.

Workspace ONE Intelligent Hub serves as the self-service app catalog with categories, featured apps, and notification-driven installs.

Industry-leading compliance engine with 5-minute check intervals, 30+ compliance rules, and automated escalation actions.

Workspace ONE Access provides comprehensive conditional access with device compliance, network, and risk-based policies.

Full encryption management with FileVault key escrow, BitLocker management, and Android encryption enforcement.

Full SCEP, PKCS#12, and manual certificate deployment with certificate authority integration and auto-renewal.

Trust Network integrations with third-party MTD vendors; Workspace ONE Intelligence for risk scoring and automated response.

Comprehensive OS update management with DDM for Apple, Windows Update for Business, and Android Enterprise firmware policies.

Full patch management via Freestyle Orchestrator with third-party app patching, testing groups, and automated rollout.

Update deferral for iOS/macOS via DDM restrictions and Windows Update for Business ring-based deployment.

Full wipe, enterprise wipe, and device retirement workflows with audit trail and Apple Business Manager release.

Device lifecycle dashboard with warranty tracking, device age reporting, and Intelligence Platform for refresh planning.

Intelligence Platform provides advanced analytics dashboards with trend analysis, risk scoring, and predictive insights.

Custom report builder with 250+ data points, scheduled reports, and Intelligence custom dashboards with SQL-like queries.

Comprehensive inventory with hardware specs, installed apps, certificates, profiles, and real-time device telemetry.

Comprehensive audit logs with admin actions, console events, device commands, and API call tracking.

Real-time device queries with battery, storage, location, and connectivity data refreshed on 5-minute cycles.

Full remote lock, wipe, enterprise wipe, restart, and shutdown commands across all platforms with confirmation workflows.

Remote view/control via Workspace ONE Assist (separate add-on) for Android, iOS, Windows, and macOS.

Remote shell via Sensors and Scripts across macOS, Windows, and Linux with output collection and scheduling.

Self-Service Portal via Intelligent Hub with device info, app catalog, and help desk integration.

File push and retrieval via Content Gateway; log collection and diagnostic bundle retrieval from devices.

Smart Groups with organisational groups, custom attributes, and compliance-based dynamic membership across all platforms.

Tags and organisational group hierarchy for policy scoping with assignment groups and exclusions.

Geofencing with compliance actions and location-based profiles; geo-boundary alerts and compliance escalation.

Time-based compliance windows and Freestyle Orchestrator for scheduled workflow execution.

Hierarchical organisational groups with inheritance and override; clear policy precedence across group levels.

Entra ID integration via Workspace ONE Access for user sync, conditional access, and compliance-driven policies.

SAML/OIDC integration with Okta, Google, and other IDPs via Workspace ONE Access federation.

ACC (AirWatch Cloud Connector) enables on-premises AD/LDAP sync without opening inbound firewall ports.

SCEP and certificate authority integration for certificate-based Wi-Fi, VPN, and email authentication.

User-device mapping with primary device designation and user-centric policy targeting across platforms.

Comprehensive REST API with Swagger documentation covering devices, users, apps, profiles, and compliance.

Webhook notifications for device events; Freestyle Orchestrator enables complex event-driven automation workflows.

Syslog forwarding, Splunk integration, and Intelligence Platform for security event correlation and SIEM connectivity.

ServiceNow CMDB integration, ITSM connectors, and Intelligence Platform for automated ticket creation.

Sensors and Scripts for macOS, Windows, and Linux with scheduling, output collection, and Freestyle Orchestrator workflows.