Deploy Netskope Client For iOS In Restricted Regions - Netskope Technical Documentation

This document describes the various methods to deploy Netskope Client using MDM in restricted regions.

The admin can choose one of the following options:

Using Volume Purchase Program (VPP)
Apple Developer Enterprise Program (ADEP)

Option 1: Deployment Using Volume Purchase Program (VPP)

Prerequisites

Ensure that Apple Business Manager (ABM) is linked with Mobile Device Management (MDM).

This method can be used if the ABM account is from a non-restricted region. Go to Preferences > Organization Information to verify the region of the ABM account.

Deployment Procedure

Configuration in Apple Business Manager

Perform the following steps to initiate a purchase in ABM:

Login to Apple Business Manager.
Go to Apps and Books.
Search for Netskope Client.
Initiate a purchase depending on the number of users.

You need not pay any amount during the purchase as the Price reflects 0.

Configuration in Microsoft Intune

After you make the purchase in Apple Business Manager, check for the Netskope Client app in Microsoft Intune MDM.

In Microsoft Intune, go to Apps > iOS/iPadOS.
Search for Netskope Client app with Type as iOS volume purchase program app as the Client app was synchronized from Apple Business Manager.

Once this is complete, you can distribute the Netskope Client app to the users in the restricted region.

Option 2: Deployment Using Apple Developer Enterprise Program (ADEP)

Using this option, large organizations can develop and deploy proprietary applications for their employees. This option is mostly applicable for cases that require private distribution directly to employees using secure internal systems or through a Mobile Device Management (MDM) solution.

Deployment Procedure

Invite one of Netskope developers to your team in a developer role.
The admin needs to create provisioning profiles.
Netskope provides xcharchive file.
This method is safe since there is no need to share any signing certificates – developer cert is produced by Apple just for the developer(invited) and can be used only on certain devices under full control of the Enterprise account holder.
The admin can now sign the application and distribute with their preferred method such as MDM or any other methods already being utilized.