Managed Configuration for Genius Scan Enterprise

Enabling IT to remotely configure Genius Scan to help employees work from anywhere while keeping your company’s data safe.

Introduction

MOBILITY MANAGEMENT WITH GENIUS SCAN ENTERPRISE

Genius Scan for Enterprise is fully compatible with Enterprise Mobility Management (EMM) solutions (these solutions are also called Mobile Device Management (MDM) or Mobile Application Management (MAM) solutions as well, but for the sake of simplicity we will use the term EMM in this documentation). This lets you rely on Volume Purchase Programs to purchase Genius Scan in bulk for your users, and then pre-configure Genius Scan for Enterprise to simplify the setup or impose limitations to your managed users.

OBJECTIVE

This document lists the configuration keys that can be used to customize the behavior of Genius Scan, and gives some insights on what is possible when using Genius Scan for Enterprise with an EMM.

How to deploy Genius Scan

DEPLOYMENT THROUGH MDM

Your EMM has the capability to deploy applications that live on the public app stores to mobile devices. Operating systems such as iOS and Android provide vendors of EMM solutions with native built-in APIs to make this possible. Using this capability, Genius Scan Enterprise (available in the public app stores) can be installed automatically or via a self-service catalog maintained by the EMM platforms participating in the AppConfig Community. For Android, if your country is not supported by Google for Business, you can choose to get a custom version of Genius Scan to be deployed privately as an internal or in-house app. EMMs participating in AppConfig Community have the capability to deploy these types of apps as well.

ADDITIONAL SYSTEM CONFIGURATION

Additionally, you can rely on your EMM to add system-wide limitations to your managed users. This is just indicative of what you can do. Please refer to Apple’s guide and Google’s guide for an exhaustive list of options.

MDM Configuration Reference

This managed configuration reference is only available in Genius Scan for Enterprise. In your EMM, locate Genius Scan for Enterprise and edit its app-specific remote configuration. Depending on your EMM, the manner in which you input the configuration might be slightly different, but it will always rely on setting up a configuration dictionary.

Volume Licensing

License key

On Android, the Genius Scan application must be initialized with a valid license key in order to activate the Enterprise features and to enable all configuration options. To order and renew your license, contact our sales team at sdk@geniusscan.com.

On iOS, you can purchase volume licenses directly with the Apple Volume Purchase Program. No configuration key is required.

iOS
Android
Key 
  ENTERPRISE_KEY
Type
String
Value
Your annual license key
Example
  { "ENTERPRISE_KEY": "0303005107563495254170914364rb05030a0c5" }

Disable Cloud and Third-Party Services

Whitelist export plugins

Genius Scan supports a large number of export plugins such as Box, Dropbox, Email, FTP … You may want to restrict which export plugins can be used in your managed environment.

iOS
Android
Key 
  whiteListedExportPlugins

  PREF_EXPORT_PLUGINS_ALLOWED
Type
Array of Strings, or String with comma-separated values
String with comma-separated values
Value
List of plugin identifier strings. If empty, all plugins are enabled. Possible values are: Email CameraRoll GeniusSign GeniusFax CloudDrive (Files / iCloud Drive) Box Dropbox Evernote FTP GoogleDocs (Google Drive) SkyDrive (OneDrive) OneNote WebDav AirPrint Expensify SugarSync OtherApps
For an external app, specify the package name of the app (e.g. com.dropbox.android or com.google.android.gm for Gmail). For built-in export plugins, specify the package name com.thegrizzlylabs.geniusscan.plugin.{ftp, memory, gallery, print}. If the restriction is not specified or has an empty value, all plugins are enabled.
Example
  { "whiteListedExportPlugins": [ "Email", "FTP" ] }

  { "whiteListedExportPlugins": "Email,FTP" }

  { "PREF_EXPORT_PLUGINS_ALLOWED": "com.google.android.gm,com.thegrizzlylabs.geniusscan.plugin.ftp"}
Disable WiFi sharing

Remove the ability to turn on Wifi Sharing to access documents on other devices

iOS
Android
Key 
  wifiSharingEnabled
Type
Boolean or String
Value
false or "false"
Example
  { "wifiSharingEnabled": false }

  { "wifiSharingEnabled": "false" }
Disable Genius Cloud

Prevent users from connecting to our synchronization and backup service Genius Cloud. ⚠ Note the difference between the boolean values on iOS and Android.

iOS
Android
Key 
  GeniusCloudDisabled

  PREF_GENIUS_CLOUD_ALLOWED
Type
Boolean or String
Boolean
Value
true or "true"
false or "false"
Example
  { "GeniusCloudDisabled": true }

  { "GeniusCloudDisabled": "true" }

  { "PREF_GENIUS_CLOUD_ALLOWED": false }

PRE-CONFIGURE FTP CREDENTIALS

FTP Host

The FTP hostname

iOS
Android
Key 
  FTPEngineHost

  PREF_FTP_HOST
Type
String
String
FTP User

The FTP username

iOS
Android
Key 
  FTPEngineUser

  PREF_FTP_USERNAME
Type
String
String
FTP Root Path

The root path configured on the FTP. The user will only be able to upload documents to subfolders located at this path.

iOS
Android
Key 
  FTPEngineRootPath

  PREF_FTP_ROOT
Type
String
String
FTP Password

The FTP password

iOS
Android
Key 
  keychain_FTPEngine

  PREF_FTP_PASSWORD
Type
String array or comma-separated string value
String
Value
The user name and the password
the password
Example
  {
    "FTPEngineHost" : "ftp.mycompany.com",
    "FTPEngineUser" : "johndoe",
    "keychain_FTPEngine" : [ "johndoe", "myp4ssw0rd" ]
    "FTPEngineRootPath": "johndoe/scans",
  }

  {
    "PREF_FTP_HOST" : "ftp.mycompany.com",
    "PREF_FTP_PORT" : "21",
    "PREF_FTP_USERNAME" : "johndoe",
    "PREF_FTP_PASSWORD" : "myp4ssw0rd",
    "PREF_FTP_ROOT": "johndoe/scans",
  }

PRE-CONFIGURE WEBDAV CREDENTIALS

WebDAV Host
iOS
Android
Key 
  WebDavEngineHost
Type
String
Value
The WebDAV host
FTP User

The WebDAV username

iOS
Android
Key 
  WebDavEngineUser
Type
String
WebDAV Root Path

The root path of the WebDAV mount. The user will only be able to upload document to subfolders located at this path.

iOS
Android
Key 
  WebDavEngineRootPath
Type
String
WebDAV Password

The WebDAV password

iOS
Android
Key 
  keychain_WebDavEngine
Type
String array or comma-separated string value
Value
The user name and the password
Accept WebDAV self-signed certificates

If you use HTTPS with a self-signed certificate, you will need to turn this on. However, we strongly recommend that you don’t use a self-signed certificate.

iOS
Android
Key 
  WebDAVSelfSignedCertificate
Type
Boolean
Value
true or false. By default, is false. Note the capitalization of 'WebDAV' in the key, different from the other keys.
Example
  {
    "WebDavEngineHost" : "https://webdav.mycompany.com",
    "WebDavEngineUser" : "johndoe",
    "WebDavEngineRootPath": "/johndoe/scans",
    "keychain_WebDavEngine" : "[ "johndoe", "johndoes' password" ]"
  }
  {
    "WebDavEngineHost" : "https://webdav.mycompany.com",
    "WebDavEngineUser" : "johndoe",
    "WebDavEngineRootPath": "/johndoe/scans",
    "keychain_WebDavEngine" : "johndoe,johndoes' password"
  }

  {
    "PREF_FTP_HOST" : "ftp.mycompany.com",
    "PREF_FTP_PORT" : "21",
    "PREF_FTP_USERNAME" : "johndoe",
    "PREF_FTP_PASSWORD" : "myp4ssw0rd",
    "PREF_FTP_ROOT": "johndoe/scans",
  }

PRE-CONFIGURE THE DEFAULT EMAIL ADDRESS

Default recipient
iOS
Android
Key 
  DefaultEmailTo

  PREF_DEFAULT_RECIPIENT
Type
String
String
Value
multiple email addresses separated by commas or semi-colons
a single email address
Default carbon copy
iOS
Android
Key 
  DefaultEmailCc
Type
String
Value
multiple email addresses separated by commas or semi-colons
Default blind carbon copy
iOS
Android
Key 
  DefaultEmailBcc
Type
String
Value
multiple email addresses separated by commas or semi-colons

Examples

FULLY DISABLE ANY THIRD-PARTY CLOUD, ONLY ALLOW EMAIL

iOS
Android
  {
    "whiteListedExportPlugins": [ "Email" ],
    "wifiSharingEnabled": false,
    "GeniusCloudDisabled": true
  }

  {
    "PREF_EXPORT_PLUGINS_ALLOWED": "com.google.android.gm",
    "PREF_GENIUS_CLOUD_ALLOWED": false
  }

com.google.android.gm is the bundle identifier of Gmail.

FULLY DISABLE ANY THIRD-PARTY CLOUD, ONLY ALLOW SOME SPECIFIC OTHER APPLICATION

iOS

First, you need to whitelist or blacklist the desired apps system-wide: you can use the iOS Configuration Profile keys whitelistedAppBundleIDs or blacklistedAppBundleIDs. Once this is done, you can use the following configuration for Genius Scan:

  {
    "whiteListedExportPlugins": [ "OtherApps" ],
    "wifiSharingEnabled": false,
    "GeniusCloudDisabled": true
  }

Genius Scan will only let users export to other applications, and other applications will only show authorized applications.

Twitter

© 2024 The Grizzly Labs. All rights reserved.