4.6 Registering a Mobile Device with the Appliance

Users can install the NetIQ MobileAccess app on a mobile device to access the single sign-on services of MobileAccess providers and CloudAccess providers. A user can register a device with multiple providers by setting up separate accounts for each one. If a user registers a device with multiple providers, the user must select the account to use for a session from the Accounts > Providers list. By default, the app connects the user to the first provider in the list.

Before users can register their mobile device with the appliance, the following prerequisites must be met:

A MobileAccess appliance or a CloudAccess appliance, installed and configured.
The MobileAccess tool, enabled and configured on the appliance.
A signing certificate configured on the appliance.
Applications, configured and entitlements are configured by mapping authorizations for applications to roles (groups) in the identity source.
The MobileAccess app, installed by users on their mobile devices. During registration, the mobile device should be connected to a network that does not use HTTP proxy.

4.6.1 iOS Devices

To register a mobile device using a link from the appliance administrator:

The administrator sends users an email with a link for the CloudAccess appliance. The link looks like this:

comnetiqauth://x-callback-url/register?providerUrl=https://appliance_dns_name/
The user opens the email from the mobile device.
The user taps the link.

The link launches the application with the Provider value filled in.
The user taps SignIn to begin the registration process.
On the CloudAccess login page, the user types their corporate credentials for the account, and taps Sign in.
(Conditional) If the administrator has specified that a PIN is required for the MobileAccess app, the user creates a PIN to be entered when the app launches.

The user’s mobile device is registered.

To register a mobile device manually:

The administrator provides users the login URL for the CloudAccess appliance. For example:
```
https://appliance_dns_name
```
The user launches the MobileAccess app on their mobile device.
The user taps Accounts, then taps Plus (+) to add a new account.
The user types the Provider URL for the account, then taps SignIn to begin the registration process.
On the CloudAccess login page, the user types their corporate credentials for the account, and taps Sign in.
(Conditional) If the administrator has specified that a PIN is required for the MobileAccess app, the user creates a PIN to be entered when the app launches.

The user’s mobile device is registered.

To verify that the device is registered with the appliance:

The user taps Accounts at the bottom of the app window.
The user can verify that the device is listed under Devices, along with the time of registration.

The device name is the name that is set on the Settings > General > About window of the mobile device. Users can change this name, but it is not configurable by the administrator of the CloudAccess appliance.

Tapping the All Apps icon displays the icons for configured applications. This page is empty until the administrator configures application connectors to be accessible from mobile devices.

Tapping the Favorites icon displays the icons for apps that the user chooses as their favorites. This page is empty until the user adds apps from the All Apps page to the Favorites page.

To add an app to Favorites:

On the All Apps page, long-press any app until all of the apps begin to shake.
Select the X on an app to add it to Favorites.
Tap Home to end the selection process.

After the user adds apps to Favorites, MobileAccess opens to the Favorites page. The user can view all applications by tapping All Apps.

To deregister a mobile device from the appliance:

The user taps Accounts at the bottom of the app window.
Under Devices, the user swipes left on the device name to expose the Delete option.
The user taps Delete.

The user’s mobile device is deregistered.

4.6.2 Android Devices

To register a mobile device using the app UI:

The administrator provides users the login URL for the CloudAccess appliance. For example:
```
https://appliance_dns_name
```
The user launches the MobileAccess app on their mobile device.
If this is the first time the user opens the app, it presents the MobileAccess License Agreement. The user reads the agreement and taps Accept to continue.
The user taps the Tools icon, then taps Accounts > Add Accounts.
The user types the DNS name or URL for the account, then taps Sign in to begin the registration process.
On the CloudAccess login page, the user types their corporate credentials for the account, and taps Sign in.
(Conditional) If the administrator has specified that a PIN is required for the MobileAccess app, the user creates a PIN to be entered when the app launches.

The user’s mobile device is registered.

To register a mobile device using the device settings:

The administrator provides users the login URL for the CloudAccess appliance. For example:
```
https://appliance_dns_name
```
The user launches the Settings tool on their mobile device.
The user taps Add Account.
In the list of installed apps, the user taps MobileAccess.
If this is the first time the user opens the app, it presents the MobileAccess License Agreement. The user reads the agreement and taps Accept to continue.
The user types the DNS name or URL for the account, then taps Register to begin the registration process.
On the CloudAccess login page, the user types their corporate credentials for the account, and taps Sign in.
(Conditional) If the administrator has specified that a PIN is required for the MobileAccess app, the user creates a PIN to be entered when the app launches.

The user’s mobile device is registered. The device opens to the landing page for the provider. This page is empty until the administrator configures application connectors to be accessible from mobile devices.

To verify that the device is registered with the appliance:

The user taps the Tools icon to view the Settings page.
The user taps Manage Devices.
The user can verify that the device is listed under Devices, along with the time of registration.

The device name is the name that is set on the Settings > General > About window of the mobile device. Users can change this name, but it is not configurable by the administrator of the CloudAccess appliance.

To deregister a mobile device from the appliance using the app interface:

The user taps the Tools icon to view the Settings page.
Under Accounts, the user taps Remove account: appliance_dns_name.

The user’s mobile device is deregistered.

To deregister a mobile device from the appliance using device settings:

The user launches the Settings tool on their mobile device.
Under Accounts, the user taps MobileAccess.
The user taps the menu, then taps Remove Account.

The user’s mobile device is deregistered.