---
title: "Enrollment of Mobile Device Management App using MobileIron for iOS Devices"
canonical: "https://docs.infoblox.com/space/BloxOneThreatDefense/35437264/Enrollment%20of%20Mobile%20Device%20Management%20App%20using%20MobileIron%20for%20iOS%20Devices"
format: markdown
---
This guide provides step-by-step instructions for enrolling **Infoblox Mobile Endpoint (EP)** on iOS devices using MobileIron. The process includes uploading configuration files, registering devices, and deploying the Infoblox App through MobileIron MDM.

> 📝 **Important Notes**
> 📝 
> 📝 - **Proxy Mode Warning:** The **proxy mode** feature has not been tested and may not function correctly.
> 📝 - **Authorization Changes:**
> 📝   - **Infoblox Endpoint iOS version 2.0.7+** replaces `customerId` with `joinToken` for authorization.
> 📝   - Existing devices with older versions of the app will update automatically.
> 📝   - New installations require updating the `joinToken` in the configuration settings.

### **Step 1: Upload the Configuration File in MobileIron for Configuring the VPN**

An **app-config file** is required to update the app’s configuration in **MDM**. To upload the configuration file:

1. Log into the **MobileIron Admin Portal**.
2. Navigate to **Configurations**.
3. Click **+ Add** to begin the configuration setup process.
  The *Configurations* screen in the Mobile Admin Portal.
4. In the **Add Configuration** screen, select **Custom**.
  
5. Provide a **name** for the profile, select **iOS**, and upload the **.mobileconfig** file.  Click *[here](https://infoblox-docs.atlassian.net/wiki/download/attachments/9079775/BloxOne%20.mobileconfig?version=1&modificationDate=1693592213859&cacheVersion=1&api=v2)* to download the *[mobileconfig](https://infoblox-docs.atlassian.net/wiki/download/attachments/9079775/BloxOne%20.mobileconfig?version=1&modificationDate=1693592213859&cacheVersion=1&api=v2)* file.
  - *Click **[here](https://infoblox-docs.atlassian.net/wiki/download/attachments/9079775/BloxOne%20.mobileconfig?version=1&modificationDate=1693592213859&cacheVersion=1&api=v2)* to download the *[mobileconfig](https://infoblox-docs.atlassian.net/wiki/download/attachments/9079775/BloxOne%20.mobileconfig?version=1&modificationDate=1693592213859&cacheVersion=1&api=v2)* file.
  
  
6. Click **Next** to proceed with the configuration process.
7. In the *Distribute* section, configure the distribution settings, Click **Done** when you have completed the distribution configuration set-up process,
8. Next, proceed with registering the Infoblox iOS and deploying it to devices.\

### **Step 2: Download the MDM Configuration File from the Infoblox Portal**.

### An **app-config file** is required to update the app’s configuration in the **MDM system**. To download the file:

Log into the **Infoblox Portal**.

1. Navigate to **Security **>** Threat Defense **>** Endpoints **>** Endpoint Groups**.
2. Click **Download MDM Configuration**, then select **iOS Config File**.
  
  
3. To assign an endpoint to a specific **endpoint group**:
  - Click the three horizontal bars icon next to the endpoint group name.
  - Select **Download MDM Configuration **>** iOS Config File**.
  

### **App Config File Parameters**

The downloaded app-config file contains the following parameters:

- **joinToken** – The value in the XML file.
- **groupName** – The Infoblox Portal group to which the endpoint will be assigned. If the group does not exist, the endpoint will be added to **All Infoblox Endpoints**.
- **userId** – A unique name that identifies a mobile device, displayed in **Infoblox Portal > Security **> **Threat Defense **>** Security **>** Endpoints**.
- **allowServiceControl** – By default, this value is `True`. To disable and hide service control, toggle this value to `False`.
- **extensionType (iOS only)** – Defaults to `"vpn"`, but can be set to `"dnsproxy"` to intercept DNS traffic via the **DNS Proxy Provider**.

In MDM, the app config can be added manually or by uploading the XML file.

> ⚠️ **Warning**: The proxy mode has not been tested and may not function correctly.

### **Step 3: Register a Mobile Endpoint with the MobileIron MDM Server**

To register **Infoblox Mobile Endpoint** with **MobileIron MDM**, follow these steps:

1. Install the **MobileIron Go** app from the **Apple App Store**.
2. Log into the **MobileIron Go** app using the credentials provided by your administrator.
3. Follow the on-screen instructions to register the device with the **MobileIron MDM Server**.

### **Step 4: Add the Infoblox App in the MobileIron Server**

To add the **Infoblox Endpoint** app in **MobileIron Server**, follow these steps:

1. Install the app on an **iOS device**.
2. Navigate to **Apps > App Catalog**, then click **+ Add**.
3. Choose the **iOS device platform**.
4. Search for **Infoblox**, select the app, and click **Next**.
5. Go to the **Distribute** section and select the available options.
6. Click **Next** and proceed with uploading and adding the **app-config file**.

### **Step 5: Upload and Add the App-Config File**

To upload and add the configuration file:

1. Select **Apple Managed App Configuration** from the menu.
  
  The location of Apple Managed App Configuration in the *App Configuration* tab.
  *Image: The location of Apple Managed App Configuration in the "App Configuration" tab.*
2. Use the downloaded **config file** to import or manually enter the **app-config settings**.
  
  Importing the Infoblox Endpoint application configuration file in the *Configuration Setup *screen.
  
3. Click **Next > Done**. After a few minutes, the **endpoint** will be automatically installed on the **client device**.
4. Open the **Infoblox Endpoint** app on the **iOS device**. After a few seconds, the app will display its **protected status**.
  

### **Adding additional details related to the userID parameter**

By default, Infoblox assigns `'Default User ID'` to the `userId` parameter in the App Configuration for mobile endpoints. If this configuration is pushed to multiple devices via MDM, all users will appear with the same username in the Infoblox Portal.

To assign a unique username to each mobile endpoint device, configure a user metadata variable using any relevant field based on your requirements

Set the `userId` parameter to a dynamic value using a variable in MDM.

userID ----> ${deviceName}

![Setting the userID parameter. ](media://05f7e89c-9655-4008-bd5d-b25633d2c7c9)

![Setting the userID to the device name. ](media://2d7ad316-c66e-47c6-b330-83079d8d008a)