Meraki

beks88 · ‎Jul 21 2020

A few weeks ago, SM got this feature when opening an App to view its details

vassallon · ‎Jul 21 2020

@Boyan1, What I have asked for is a setting we can manage via MDM just like they gave us for forcing WiFi always on. We can skip if location services appear during setup but I want a setting like this for both Bluetooth and Location Services to where we can check a box and know that both are always on.

Roska · ‎Jul 20 2020

@JavierD https://documentation.meraki.com/SM/Device_Enrollment/Android_Zero-Touch_Enrollment

beks88 · ‎Jul 20 2020

Yes, that's what the docs say, but why am I loosing connection if switching now between v1 and v2? Something could be wrong in the code. @MeredithW any date when this was released? I need to know whom am I going to blame for the support invoice 🙂

Aari · ‎Jun 6 2020

I'm also facing the same issue at the moment. Anyone found any solution?

Jame · ‎Jun 2 2020

Yes, the new agent solved this for me as well. In addition to a profile for m_agent I made with PPPC Utility.

T1 · ‎May 28 2020

If anyone is still interested, this is how I did it. In Okta create a new app, type Web. In General Tab set the following: Initiate login URI: https://m.meraki.com Login redirect URIs: merakismoauth://com.meraki.pcc https://m.meraki.com https://mp.meraki.com/ssp/login https://mp.meraki.com/ssp/loginsuccess https://portal.meraki.com/loginsuccess Allowed grant types: Authorization code tick Implicit (Hybrid) tick Allow ID Token with implicit grant type tick Allow Access Token with implicit grant type In MDM go to System Manager > General and scroll down to User authentication settings. Choose OpenID Connect from the drop down menu. Authorization endpoint: https://TENANT.okta.com/oauth2/v1/authorize Token endpoint: https://TENANT.okta.com/oauth2/v1/token Client ID: XXXXXXXXXXXXXX (Okta app Client ID) Token issuer claim: https://TENANT.okta.com Public Keys Endpoint: https://TENANT.okta.com/oauth2/v1/keys?client_id=XXXXXXXXXXXXXXX Public Keys Format: JWK Endpoints can be looked up via this API call: https://TENANT.okta.com/.well-known/openid-configuration?client_id=XXXXXXXXXX I suppose this approach can be used with any IDP and then you need to double check what claims IDP returns to Meraki. Meraki expects "email" claim with user email as a value. Okta sends all default info in its claim so there is no need to set up a custom authorization server. With other IDPs it can be different. I asked support to include this example to official docs.

beks88 · ‎May 28 2020

I'll hang in here, there seem to be an issue overall with updating Apps on macOS

DSM · ‎May 19 2020

Was there ever any update on this @PaulMc ? I think it’s to do with the Microsoft Intune SDK for iOS which they’ve wrapped all their Office apps in. I get a similar error trying to open links from Outlook in Edge on iOS. Even though I’m using Meraki and don’t have InTune app protection policies enabled, I think it somehow defaults to not allowing cross-app communication... I don’t think it’s related to Apple’s Managed Open In which containerises data because the popup contains Microsoft account details rather than being a generic Apple one. Let me know if you have any more information please

beks88 · ‎Apr 6 2020

@SimonA1 This could be also the Apple ID you are using for Apple Business Manager. You can try clearing the activation lock in bulk through Dashboard. Check this post from @Kevin_C https://community.meraki.com/t5/Endpoint-Management-Systems/Activation-Locked-iPads/m-p/49665/highlight/true#M4827

beks88 · ‎Mar 19 2020

Referring to this thread https://community.meraki.com/t5/Endpoint-Management-Systems/Device-resets-now-seeing-quot-Invalid-Profile-quot-errors-upon/m-p/79849#M6631

beks88 · ‎Mar 19 2020

Linking this threads together, maybe @Noah_Salzman or @MeredithW can merge them https://community.meraki.com/t5/Endpoint-Management-Systems/Enrolling-devices-fail/m-p/79775#M6624 According to support it's an SM issue and engineers are investigating. Maybe too many new attempts on the servers because of Corona, there are several servers fighting with requests the last days.

Thygesen · ‎Feb 18 2020

@joe Thanx .. 🙂 I'm checking it out .. Looks crisp .. Needs something on the security center part though .. Could be nice to have it in the overview part .. With Highest regards Thyge

Slider · ‎Feb 14 2020

Thank you thats what i was looking for as an answer.

beks88 · ‎Feb 4 2020

@Yuya After going through this feature (you linked) with an Apple technician I can confirm, that this integration makes only sense if you have BYOD enrollment scenarios for User Enrollment. This will give your organization the ability to prevent your employees to use their company mail as a private Apple ID for purchasing Apps etc.

jysteele · ‎Jan 15 2020

Thanks for all the suggestions! Since I had a pre-existing profile set up with apps set to not use vpp, once I carefully went through, changed them all over, and made sure my test ipad was only getting apps through vpp, I reset it and the profile synced without asking for an apple id. I guess if any app is set that way it causes the whole process to stop. Thank you again!

beks88 · ‎Jan 9 2020

Currently not supported, make a wish. Since TeamViewer has it's ways, Meraki could do it either. Be aware, you'll always need users attention on an iOS device.

beks88 · ‎Jan 4 2020

To my knowledge, there is no "silent" way to do this. Maybe one of these two tries can help you out, test it on two different devices First try: If the devices are in DEP, link them to Meraki In Meraki dashboard, download the SM agent In Jamf push the agent to the devices In Jamf push a script, which opens the Meraki enrollment link in the default browser -> User interaction needed. After device finishes syncing in Meraki, unenroll it from Jamf Second try: If the devices are in DEP, link them to Meraki. In Jamf prepare a script, which calls the following command 10.13.4 or lower sudo /usr/libexec/mdmclient dep nag macOS 10.14 or higher sudo profiles renew -type enrollment This should trigger a DEP notification and users will be able to enroll in Meraki -> User interaction needed After device finishes syncing in Meraki, unenroll it from Jamf I'm not sure if it's possible to have MDM profiles from different providers. I think they'll access the same API on the devices, could cause more troubles than you would like.

beks88 · ‎Dec 18 2019

Systems Manager - General - User authentication settings There you can deactivate user authentication

beks88 · ‎Dec 15 2019

Just to clarify, are you using one Meraki user for all these phones or every phone has it's own Meraki user? Have you enrolled to Android Enterprise in Meraki?

beks88 · ‎Nov 28 2019

Since you have to click renew on both sides, Apple and Meraki, I would say yes it will break things. But I can't confirm it. Since you always have to tell which Apple ID had been used for creation the cert is bind to the AppleID aswell. Is the mail used for this Apple ID a private one or company/school wide? Maybe give it a try on a different MDM (with some free testing period)? Check out this KB from G-Suite ^^ https://support.google.com/a/answer/7628860?hl=en

RonB · ‎Nov 21 2019

But will this be fixed or is this on the roadmap?

beks88 · ‎Nov 21 2019

It's not as much confusing as you think :). We have for different device use cases different SM networks/instances (name it how you like). The only thing you have to do is to assign the devices manually to the desired MDM (in this case network/instance).

beks88 · ‎Nov 20 2019

So my initial solution doesn't work for another device. Freshly installed Mac, VPP is device assigned and getting same error again. Some apps worked after multiple reinstall commands, some still answer with same error.

beks88 · ‎Nov 19 2019

OK, but what is meant with this point Use the certificates in the AnchorCerts property of the Profile to pin the host to the certificates. I apologize if I shall go to Apple with my questions, just trying to understand this.

About beks88

beks88

Community Record

Badges