---
title: "Enrollment for Mobile App using IBM MaaS 360"
canonical: "https://docs.infoblox.com/space/BloxOneThreatDefense/35374645/Enrollment%20for%20Mobile%20App%20using%20IBM%20MaaS%20360"
format: markdown
---
This guide provides step-by-step instructions for silently installing **Infoblox Mobile Endpoint** on iOS and Android devices using IBM MaaS 360. The process includes downloading configuration files, registering devices, installing the Infoblox app, and configuring silent DNS proxy authorization.


> 📝 ## **Important Notes**
> 📝 
> 📝 - **Proxy Mode Warning:** The proxy mode feature has not been tested and may not function correctly.
> 📝 - **Authorization Changes:**
> 📝   - **Infoblox Endpoint iOS version 2.0.7 and above** uses `joinToken` instead of `customerId` for authorization.
> 📝   - **Infoblox Endpoint Android version 1.0.10 and above** replaces `customerId` with `joinToken` for authorization.
> 📝   - The `customerId` attribute will be removed in future app versions. Until all devices are updated to **version 1.0.10 or later**, you may need to maintain both `customerId` and `joinToken` in the app configuration.

### **Step 1: Download the MDM Configuration File from the Infoblox Portal**

An **app-config file** is required to update the app’s configuration in **MDM**. To download the file:

1. Log into the **Infoblox Portal**.
2. Navigate to **Security > Threat Defense **> **Endpoints > Endpoint Groups**.
3. Click **Download MDM Configuration**, then select **iOS Config File** or **Android Config File**, depending on the device.
  
  
4. To assign an endpoint to a specific **endpoint group**:
  - Click the three horizontal bars icon next to the endpoint group name.
  - Select **Download MDM Configuration > Android Config File** or **iOS Config File**.
  
  
5. Save the downloaded configuration file to an easily accessible directory.

#### **App Config File Parameters**

The downloaded **MDM configuration file** contains the following parameters:

- **joinToken** – The value in the XML file, required for authentication.
- **groupName** – The Infoblox Portal group to which the endpoint will be assigned. If the group does not exist, the endpoint will be added to **All Infoblox Endpoints**.
- **userId** – A unique name that identifies a mobile device, displayed in **Infoblox Portal > Security > Threat Defense **> **Endpoints**.
- **allowServiceControl** – By default, this value is `True`. To disable and hide service control, toggle this value to `False`.
- **extensionType (iOS only)** – Defaults to `"vpn"`, but can be set to `"dnsproxy"` to intercept DNS traffic via the **DNS Proxy Provider**.

### **Step 2: Register a Mobile Endpoint for Use with IBM MaaS 360**

To register an endpoint device, follow the **IBM MaaS 360 enrollment process**:

1. Log into the **IBM MaaS 360 console**.
2. Follow the steps to register a device.
3. For detailed enrollment instructions, refer to:
  - *[MDM iOS Enrollment Guide](https://www.ibm.com/docs/en/maas360?topic=ios-enrolling-your-device-mdm)*
  - *[MDM Android Enrollment Guide](https://www.ibm.com/docs/en/maas360?topic=enrollment-enrolling-your-android-device-mdm)*

### **Step 3: Install the Infoblox App Using IBM MaaS 360**

### **Installation on an iOS Device**

1. Log into the **IBM MaaS 360 console**.
2. Navigate to **Apps **>** App Catalog**.
3. Click **Add > iOS **>** iTunes App Store**.
  
4. Search for **Infoblox Endpoint**, and click **Add** to include it in the app configuration.
  
5. Select the **devices and users** to which the app will be distributed.

### **Installation on an Android Device**

1. Log into the **IBM MaaS 360 console**.
2. Navigate to **Apps **>** App Catalog**.
3. Click **Add > Android **>** Google Play App**.
  
  
4. On the **Add Google Play App** screen, search for **Infoblox Endpoint**, and click **Add**.
5. Select **Infoblox Android app** from the list.
6. Click **Select > Approve **>** Add** to include the app in the catalog.
7. Click **Distribute** to assign the app to specific users.
  
  

### **Step 4: Add the App Configuration for the Infoblox iOS App**

To add an **app configuration** for iOS devices:

1. Navigate to **Apps > App Configuration**.
2. Click **Add Configuration**.
  
  
3. Enter a **configuration name**, then select the **iOS app** from the app catalog.
4. Click **Next** to proceed to the **Configuration** screen.
5. Select **Manual Configuration**, then upload the **previously downloaded config file** from the **Infoblox Portal**.
6. The **app configuration fields** for `groupName` and `userId` will be displayed.
7. Click **Next **to continue to the **iOS Distribution **screen.
  
8. Click **Publish** to publish and distribute the configuration.
  

After a few minutes, Infoblox Endpoint will be automatically installed on the client devices.   


### **Step 5: Perform Silent Authorization of DNS Proxy Permissions (iOS Only)**

1. Log into the **IBM MaaS 360 console**.
2. Navigate to **Security > Policy Management > Policies**.
3. Select an **iOS policy** to apply.
4. Navigate to **iOS Policy > Supervised Settings > DNS Proxy** and click **Edit**.
  
  
5. In the **Edit** panel, enter the following values:
  - **App Bundle ID**: `com.infoblox.atc.b1dnsproxy`
  - **Provider Bundle ID**: `com.infoblox.atc.b1dnsproxy.dnsproxy`
  
6. Click **Confirm Publish** to finalize the configuration.
7. Navigate to **Devices > Inventory**, select a device, and click **More > Request Data Refresh**.
8. **Infoblox Endpoint** will be automatically installed on the client devices.
  
9. Open the **Infoblox Endpoint** app on an iOS device. The app will display its **protected state**.

###   
**Step 6: Add the App Configuration for the Infoblox Android App**

To add an **app configuration** for Android devices:

1. Navigate to **Apps > App Configuration**.
2. Click **Add Configuration**.
  
  *Image: Adding the Android app configuration in IBM MaaS 360.*
3. Enter a **configuration name**, then select the **Android app** from the app catalog.
4. Click **Next** to proceed to the **Configuration** screen.
5. Upload the **previously downloaded config file** from the **Infoblox Portal**.
6. The **app configuration fields** for `groupName` and `userId` will be displayed.
7. Click **Next > Publish** to finalize the configuration.
8. **Infoblox Endpoint** will be automatically installed on the client devices.
9. Open the **Infoblox Endpoint** app on an Android device. If prompted, **accept the VPN acknowledgement**. The app will display its **protected state**.