SOTI MobiControl

This release includes the following new features:

You can now conditionally grant or deny access to Microsoft 365 apps and other mobile apps which utilize Azure AD authentication on Android or iOS devices. SOTI MobiControl integration with Microsoft allows you to use MobiControl device compliance status in Azure AD conditional access policies. When configured, only the compliance statuses of devices assigned to the compliance policy will be reported to Microsoft, enabling you to manage the scope of the devices synchronized with Microsoft.

Configure App-specific and OEM-specific policies on your Android Enterprise devices using Managed Configurations without requiring Google Play Services. With this upgrade, you can easily manage and deploy OEM Specific features on Android devices even while offline.

Enroll personally-owned Android devices into Work Profile management using Google's new Android Management APIs. Most importantly, quickly deploy them without needing to install the SOTI MobiControl agent. You can enroll your devices into Work Profile via Android Management API using Enrollment Policies, configure them by deploying supported Profiles, and can deploy Apps from Google Play Store using App Policies.

Keep Windows Modern devices in your organization up-to-date with the latest Windows Updates available through Windows Server Update Services (WSUS) or the public Windows Update service. Through SOTI MobiControl, you can control the types of Windows Updates to apply to the devices, such as feature releases or security patches. In addition, there are a variety of new controls, including when to apply the updates automatically, differ the update for a period, mandate MobiControl Administrator approval before using the updates, and more.

SOTI MobiControl now includes two new user permissions, View SOTI Announcements and View System Announcements, to help administrators limit the announcements shown to certain user roles.

Android Enrollment Policies (formerly called Add Device Rules) creation and management is migrated to the next-generation user interface for a better user experience and overall consistency. The new design provides a view of all Android Enrollment Policies in a list along with a detailed view of each policy.

Policy features have been migrated to the next-generation interface in SOTI MobiControl under the Policies menu item. All the existing policies such as App, Compliance, and Enrollment are listed along with legacy rules such as File Sync, Device Relocation, Data Collection, and Alerts to provide better visibility of features available within MobiControl.

Users are now able to filter options visible in the Global Settings menu using a search bar. This makes navigating through the different categories to locate a specific feature a quicker and easier process.

The device details screen now displays the information about the version of the installed application.

Users can now use Device Enrollment Time as a filter criteria for Profile, App Policy, and Compliance Policy assignment.

The Deployment Server port number is now displayed on the device details page for Windows CE/Mobile devices. It is additionally available as a device search criteria.

The assignment dialog for Profile, App Policy, and Compliance Policy now includes a refresh button to retrieve an accurate count of targeted devices, which includes the impact of a filter criteria.

Enterprise apps deployed as mandatory apps now automatically uninstall when the corresponding app policy is removed.

Through the embedded Zero-Touch Enrollment (ZTE) iFrame, you can now easily configure your devices that are part of your ZTE program without requiring you to leave the SOTI MobiControl Web Console.

iOS 15 is now officially certified and supported.

You can now prevent copy/pasting of data from a managed to an unmanaged app/service and vice-versa on iOS 15+ devices.

You can now disable the randomizing of MAC addresses (also known as disabling private MAC addresses) on iOS 14+ devices.

You can now prevent the removal of Managed iOS Apps on supervised devices with iOS 14+ through a new toggle in App Policies.

For iOS 12+ devices, the Device Details page shows eSIM information such as Carrier Settings Version, Mobile Country Code, Mobile Network Code, ICCID, IMEI, Phone Number and more.

For iOS 14+, you can also now view time zone information.

You can now configure corporate network boundaries for Windows Modern devices in the Windows Information Protection profile to isolate and protect corporate data. The network boundaries include domains names of cloud, work and personal resources, IP ranges, and internal and external proxy servers.

We have made performance and security improvements to give a better user experience.

You can now allow device users to enable/disable Device Time Zone.

he SOTI MobiControl-issued TLS certificate validity period has been reduced to two years from the issued date. On-premises customers are responsible for renewing TLS certificates when required.

The “View Device Scripts” general permission has been added to SOTI MobiControl to allow granular access control for Device Scripts. Upon upgrade to MobiControl 15.5.0, the “View Device Scripts” permission will be automatically granted to all users who were previously granted “Manage Device Scrips” permission.

SOTI MobiControl now provides the ability to specify non-repudiation key usage for Generic SCEP templates.

The following new REST APIs are included in this release: