Workspace ONE Launcher - VMware Workspace ONE UEM 2206

Workspace ONE Launcher

VMware Workspace ONE UEM 2206

You can find the most up-to-date technical documentation on the VMware website at:

https://docs.vmware.com/

VMware, Inc.

3401 Hillview Ave.

Palo Alto, CA 94304

www.vmware.com

Workspace ONE Launcher

VMware, Inc. 2

Contents

1 About VMware Workspace ONE Launcher 5

Workspace ONE Launcher Use Cases 5

Workspace ONE Launcher Modes 6

Supported OS Versions and Management Modes** 6

Deploy Workspace ONE Launcher to Devices 7

Deploy as Seeded Application 7

Deploy as an Internal Application 8

Deploy through Product Provisioning 8

Configure Workspace ONE Launcher Profile 8

Advanced Launcher Settings 11

Monitoring Workspace ONE Launcher Status 13

Apps for Workspace ONE Launcher 13

Approve Applications for Android 14

Bookmarks 14

How to Add Bookmarks for Android 14

Template Mode Settings 15

Administrative Passcode 16

2 Custom XML for Workspace ONE Launcher 17

Allow Split-window Mode Inside Launcher 19

Restart Device Setting 19

Use Settings Wi-Fi Action 19

Add Hub To Force Stop Blacklist 20

Hide Settings Option from Single App Floating Action Button 20

Override the duration that Launcher shows the Clearing Data Screen 20

Enable Dark Mode 21

Disable Launcher's Search Bar 21

Enable Flashlight 21

Enable Launcher Widgets 21

Disable FocusMonitoring API 23

Show Popup Notifications 23

Hide Enable Notifications Button 23

Disable Sensor Orientation 24

Speed Lockdown 24

Write Settings Permission 25

Skip overlay permission screen 25

Actionbar Settings 25

Wallpaper Scale Type 26

VMware, Inc.

Staging Admin Passcode 26

Allowlist Activities on Check-in Check-out Screen 26

Allow Log Collection 27

Allow Staging Profile 27

Force Reset Launcher Layout on Profile Update 27

Set Launcher as Default after Reboot 28

Allow Staging Settings 28

Customize Floating Home Button 28

Remove Floating Home Button 29

Enable Floating Home Button 29

Customize Single App Floating Action Button 29

Allow Localized App Names 30

Skip Usage Access Permission 30

Use Legacy Launcher Methods (Skip COSU Setup) 31

Selective App Cache Clearing 31

Restrict Folder Renaming 31

Add Custom Device Settings 31

Launcher Branding 32

Allowlist Specific App Activities 33

Remove Welcome Screen 34

Inactivity Timer 34

Hot Swap Profile Caching: 35

Allow WebView inside Launcher: 35

Dynamically add shortcuts to Launcher screen: 35

Open Native settings in tablets: 36

Clear Application Defaults 37

Boot Up Launchers 37

3 Launcher Device Settings Matrix for Android Deployment 38

4 Launcher Device Settings Matrix for Android (Legacy) Deployment 40

Using Workspace ONE Launcher 42

Device Requirements 43

Prepare Launcher Devices for Deployment 43

Using Launcher in Offline Mode 44

View Status Bar 44

View Notifications 44

Ghost Icons 45

Device Settings 45

Admin Mode 46

Workspace ONE Launcher

VMware, Inc. 4

About VMware Workspace ONE

Launcher

Workspace ONE Launcher is a fully integrated Android app launcher managed through the

Workspace ONE UEM console. IT admins customize and build their device's Launcher home

screen as a profile payload. Workspace ONE Launcher then automatically takes over as the device

home screen and applies admin-defined device and application policies. Designed with frontline

worker use cases in mind, Launcher's customizability gives admins the flexibility to serve any

business requirement.

This chapter includes the following topics:

n Workspace ONE Launcher Use Cases

n Workspace ONE Launcher Modes

n Supported OS Versions and Management Modes**

n Deploy Workspace ONE Launcher to Devices

n Configure Workspace ONE Launcher Profile

n Advanced Launcher Settings

n Monitoring Workspace ONE Launcher Status

n Apps for Workspace ONE Launcher

n Bookmarks

n Template Mode Settings

n Administrative Passcode

Workspace ONE Launcher Use Cases

Workspace ONE Launcher serves use cases across retail, logistics, and healthcare. You can use

Launcher to lock shared Android devices into a single application or a customizable device home

screen. Launcher also enables check-in / check-out functionality so users can log into Launcher

and get access to only the resources assigned to them. You can apply logos and customize the UI

color to match your company's branding guidelines.

VMware, Inc.

Use Workspace ONE Launcher to...

n Retail Kiosk Mode – Set up an interactive kiosk by locking devices into a single app.

Customers can browse store products or place food orders without employee interaction.

n Employee Shared Shift Device - Equip in-store associates with shared devices. Enable access

only to apps, content, and settings they need to complete their work and deliver high-quality

customer experiences.

n Logistics Drivers - Equip vehicles with locked down shared tablets for order tracking and

signature collection. Enable Launcher speed lockdown to prevent device access while on the

move.

n Education – Provide students with access to only a set of approved education apps. Disable

students' ability to surf the Web. Enable access to the admin-managed Play Store to download

more approved apps onto the devices.

n Healthcare – Loan out devices with approved apps for patient-use, such as games and

entertainment apps. Enable phone features and customize an address book with important

hospital contact information.

Workspace ONE Launcher Modes

Admins often desire to lock frontline shared devices into one application or a customizable home

screen. Workspace ONE Launcher services both use cases through three app modes:

n Use Single App Mode to lock each device into a single app and manage access to other

features or settings on the device.

n Use Multi App mode to lock devices in a managed home screen layout and provide access to a

set of allowlisted apps.

n Use Template Mode to customize the user interface of the Launcher app by creating app

spaces, images, and text.

Supported OS Versions and Management Modes**

Workspace ONE Launcher is only supported in Android 6.0+ Work Managed Device enrollment

mode. Workspace ONE Launcher is not supported in Work Profile enrollment.

Workspace ONE Launcher supports the following OS versions:

n 5.0.X

n 6.0.X

n 7.0.X

n 8.0.X

n 9.0.X

n 10.0.X

Workspace ONE Launcher

VMware, Inc. 6

n 11.0.X (Launcher 4.8+)

n 12.0.X (Launcher 21.06+)

Using Workspace ONE Launcher with Android versus Android (Legacy)

Each Android device in your deployment must be enrolled before it can communicate

with Workspace ONE UEM and access internal content and features. Whether you use

the Android Profile or Android Legacy profile depends on whether you use device

administrator or Android Enterprise for device enrollment.

n Deploy using the Android profile if you have completed Android EMM Registration

and are using Android 6.0+ Work managed devices.

n Deploy using Android (Legacy) if you opted out of Android EMM Registration with

Google.

Deploy Workspace ONE Launcher to Devices

Workspace ONE Launcher is not distributed through the Google Play Store and is instead

deployed as a seeded application. Admins can also upload Launcher as an internal application

or deliver the app through Product Provisioning. This way, you can control when your devices take

Launcher updates.

Deploy as Seeded Application

The simplest method of delivering Launcher to devices is the auto-installation of the seeded

version of Launcher. Seeded versions of Launcher are automatically installed on devices if:

1 A Launcher profile is assigned to an Android fully managed device.

2 If a fully managed device is enrolled to a staging user.

Workspace ONE UEM console upgrades deliver new Launcher versions as part of the upgrade

process. When new Launcher versions are made available through a console upgrade, they will

appear under Groups & Settings > All Settings > Devices & Users > Android > Service Applications

> Workspace ONE Launcher Version.

For CDN-enabled environments 21.07+, new Launcher versions are automatically seeded into

environments.

For on-prem environments, Launcher APKs can be uploaded and seeded into the environment

at the top-level OG. You can download new versions of Launcher from the My Workspace ONE

resource portal.

Configure Seeded Launcher Version Settings

Determine which version of Workspace ONE Launcher is pushed to devices with the Launcher

Version setting. Note: Only upgrade across one version at a time to prevent conflicts and

dependency issues.

1 Navigate to Devices > Device Settings > Android > Service Applications.

Workspace ONE Launcher

VMware, Inc. 7

2 Configure the applicable settings.

Setting Description

Always use the Latest

Version of Workspace

ONE Launcher

The latest version of the app automatically pushes to devices when it becomes

available. Once this setting is enabled, it applies across all devices you have enrolled

into Workspace ONE UEM using Launcher.

Workspace ONE

Launcher Version

Manually choose the version you want to deploy from the drop-down menu. Select

Upload to seed a new Launcher version. Once uploaded, the Workspace ONE

Launcher APK will be listed in the dropdown so you can select it immediately.

3 Select Save.

Deploy as an Internal Application

You can upload a Workspace ONE Launcher APK as an internal application which allows you to

manage assignment through the Workspace ONE app assignment engine.

See our documentation on how to upload internal applications from a local file.

Note: Auto-update is not supported for Launcher versions uploaded as an internal

application. To update Launcher on a device to an internal app version:

1 Navigate to Devices > List View > (Select the target device) > Apps

2 Select the checkbox next to Launcher.

3 Select Install from the actions.

Deploy through Product Provisioning

Product provisioning allows for removal and installation of applications based on Product rules.

You can upload the Workspace ONE Launcher APK to provision as a product. This provides more

granular management over app installation and the recommended tool for staged rollouts.

Learn more about uploading apps as Products and Product Provisioning.

Configure Workspace ONE Launcher Profile

Workspace ONE Launcher is configured through device profiles.

1 Navigate to Resources > Profiles & Baselines > Profiles > Add > Add Profile > Android.

n Alternatively, select Android (Legacy) to configure the Launcher profile if you've opted out

of Android EMM registration.

2 Name the device profile.

3 Navigate to the Launcher payload tab and select Add.

4 Choose the desired Launcher mode: Single App, Multi App, or Template Mode.

5 Set a passcode for entering Administrative Mode and exiting out of Launcher lock down.

Admin mode enables extra access and features for Launcher troubleshooting.

Workspace ONE Launcher

VMware, Inc. 8

6 Determine if your devices need to be used in Offline Mode or Guest Mode.

n Offline mode is used when devices are being used in check-in check-out mode. It allows

users to access the Launcher home screen even when they are unable to log in as

themselves or are in areas where network connectivity is unstable.

n Enabling guest mode allows users to check out the device without full authentication.

n This setting should be applied to both the end-user and staging user or an organization

group that includes both. Assigning to all users ensures the offline mode profile is present

when moving between users.

7 For multi-app mode, Admins can set the app grid icon size to Small, Medium, or Large.

Admins can also choose to prevent icon rearranging.

8 Workspace ONE Launcher can enable controlled access to specific native settings. Enable the

settings to which you'd like to give end-users access. On the device, these settings can be

accessed from the Launcher settings screen.

n This feature requires the Appear on Top (Draw Over Other Apps) Permission and Usage

Access (or Focus Monitoring on Samsung) Permission.

9 Choose which native device utilties and features to enable on the device.

Utilities Feature

Description

Allow App Manager Enable access to the app control page for ending app processes under Launcher settings.

Allow Keyguard Allow native keyguard features. Disabling keyguard disables the lock screen.

Allow Notification Bar Enable access to the native notification panel.

Allow Power Option Allow end users to access the power option menu by long-pressing the lock button.

Allow Recent Task List Enable the native recent tasks list feature.

Allow Status Bar Enable the native status bar.

Allow Stay Awake Allow the device to stay awake by default if connected to a power source.

Allow Widgets Allow widgets to display on the home screen. Widgets can only be added by the end-

user.

10 Select Configure Layout to navigate to a new screen for configuring the app grid, device

wallpaper, orientation preferences, and more.

Setting

Description

Orientation Set the default home screen layout to either Portrait or Landscape.

Lock Disable auto-rotate and lock Launcher into the selected orientation. To disable auto-rotate

system-wide, Launcher must be granted the write settings permission on the device.

Grid Choose a grid size for the home screen layout. The drag-and-drop grid will reflect your

selection.

Workspace ONE Launcher

VMware, Inc. 9

Setting Description

Minimize Title Bar Select to hide the title bar on the user's device.The user van still swipe down on the screen

to access the title bar and additional settings.

Add Row for Pinned

Apps

Select to create a bottom bar in the launcher configuration to pin application icons that will

remain visible on every screen. Multi App mode only.

Title Bar Icon Upload a customized icon to appear in the title bar. Available on Multi App Mode only.

Wallpaper Upload a custom wallpaper to display in the background of the Launcher setup. Available

on Multi App mode only.

11 Move to the Apps tab and use the Quick Filters pills to select Public, Internal, Web

Bookmarks, or Miscellaneous apps.

n Miscellaneous apps allow you to manually define the App Name or App ID you'd like to

add to the Launcher home screen or allow in the background.

12 Organize the Launcher Canvas with apps, view App Attributes, remove apps, and create

folders for apps to group apps together.

Canvas Settings

Settings Description

Title Bar Customize the title bar with custom text or select a custom attribute to display dynamically

depending on the user or device.

Remove Select an app in the layout to remove the app from the layout.

App Attributes Select an app in the layout or apps list to display the properties of the selected app.

Create Folder Select create folder to add a folder to the apps grid.

Layout Click to configure Launcher layout elements such as icon grid and orientation preference.

Workspace ONE Launcher

VMware, Inc. 10

View App Attributes

Settings Description

Application

Name

Enter the name of the application displayed to the user. For a public or internal app, the

application name is static and is pulled from the Application name present in Apps and Books.

For Miscellaneous apps, the name is editable and the app on the device will show the name that

is entered in this field.

Application ID Enter the unique identifier for a given Android application. The format is com.

app name

. For

example, for Workspace ONE Launcher's app ID is com.airwatch.lockdown.launcher. For a public

or internal app, the application name is static and is pulled from the Application name present

in Apps and Books. For Miscellaneous apps, the name and app ID is editable. Launcher will

attempt to allow-list any app ID added to the layout. For Miscellaneous apps, you can add a

wildcard * character to create a dynamic rule for automatic allow-listing. This will automatically

add all the whitelisted apps for this App ID package without having to repush the Launcher profile

everytime a new app is added. Caution: Minimize conflicts by ensuring apps do not share the

same application IDs.

Launch App

on Start Up

Enable to force an app to automatically start on Launcher start up or reboot. If your Launcher

profile has more than one app, you can only set this field for one app.

13 Configure Hidden Apps, if needed. Apps added under hidden apps are not displayed on the

Launcher home screen, but can be launched if another application enables access to it.

a Select the Hidden App tab.

b Drag and drop apps to add them to the canvas. You can also select the desired app and

select Add To Launcher.

c Select the app and hit Remove to remove any apps you do not need.

d Note: Hidden apps are useful for adding file viewers. For example, if an end-user would

like to open a PDF file, Launcher will not allow access to any PDF viewer that was not

added to the canvas or the hidden apps.

14 Select Save to save the layout.

15 Select Next to proceed with profile assignment.

Once the profile is on the device, Launcher will automatically apply your configured settings. If

no Launcher profile is found on the device, Launcher will display "Profile Not Found" (Launcher

21.10).

Advanced Launcher Settings

Advanced Launcher settings includes features previously only configurable through custom XML.

Learn more about these features in the documentation for custom XML.

Workspace ONE Launcher

VMware, Inc. 11

Feature Description

Use Legacy

Launcher APIs

Enabling this feature allows Launcher to use Workspace ONE's legacy methods in place of

native Android's lock task APIs for device lockdown. Starting with Launcher 4.0, Launcher uses

lock task mode by default to restrict device access.

Default to Usage

Access

On Samsung devices, Launcher defaults to using the Samsung Focus Monitoring API. This

allows Launcher to automatically foreground applications without the user having to grant the

Android Usage Access Permission. Disabling this feature on Samsung devices will require users

to grant the usage access permission on the first launch of Launcher.

Require Write

Settings Permission

Show the "Write Settings Permission" prompt during initial setup. Note, the write settings

permission allows users to modify settings you give access to. This permission is already

required for screen orientation lock changes to take effect device-wide. By default, the write

settings permission is requested when a user attempts to modify settings.

Enable App Data/

Cache Clearing

The Workspace ONE UEM console setting labeled "Clear App data on logout" clears the data of

all assigned applications after logging out. Admins can specify package IDs to skip clearing.

Enable Admin Mode

on CICO Screen

Enable the admin mode option on the check-in check-out screen. Users can exit the Workspace

ONE Launcher from the check-in/check-out screen by entering the password specified in XML.

After checkout, the admin passcode will be replaced by the end user profile admin passcode.

Note: In order for this setting to take affect, this profile must be applied to the staging user.

Allowlist Custom

Staging Activities

Allow specific activities that Launcher may otherwise block when on the check-in check-out

screen (when Launcher is assigned to the staging user). This includes native popups or UI

elements. This feature requires the Appear on Top (Draw Over Other Apps) Permission and

Usage Access (or Focus Monitoring on Samsung) Permission. Note: In order for this setting to

take affect, this profile must be applied to the staging user.

Allow Dynamic

Activities

Allow specific app activities to come to the foreground that Launcher may otherwise block.

This includes native popups or UI elements. This feature requires the Appear on Top (Draw

Over Other Apps) Permission and Usage Access (or Focus Monitoring on Samsung) Permission.

Note: In order for this setting to take affect, this profile must be applied to the staging user.

Add Custom Device

Settings

Admins can provide access to any native settings menu by defining the package and class

name. These settings will populate as a row item in the Launcher settings page. This feature

requires the Appear on Top (Draw Over Other Apps) Permission and Usage Access (or Focus

Monitoring on Samsung) Permission.

Customize Single

App Floating Button

In Single application mode, Launcher provides a Floating Action button for users to access

different launcher settings. You can configure the behavior of this button. This feature requires

the Appear on Top (Draw Over Other Apps) Permission.

Add Launcher

Branding

Add color branding to Launcher UI elements. When this field is enabled, additional fields to

configure displays. Due to an interface redesign in Workspace ONE Launcher 21.09 and above,

Title Bar Color, Title Text Color, and Status Bar Color are deprecated features and no longer

supported.

Enable Speed

Lockdown

Disable access to Launcher when the device is traveling over the specified speed threshold.

Set Launcher as

Default after Reboot

Allow Workspace ONE Launcher to open and lockdown the device after reboot regardless of

the previous state. By default, if Launcher was in admin mode or un-pinned to the Home Screen

before the device was rebooted, the device reboots to the default native Launcher. This setting

only applies to Honeywell, Zebra and Samsung devices.

Workspace ONE Launcher

VMware, Inc. 12

Feature Description

Remove Floating

Home Button Setting

Disable the floating home button. Note, the floating home button serves as an alternative home

button when the native home button is unavailable.

Allow Popup

Notifications

Admins can generate popup notifications regardless of channel priority. To show popups, the

notification bar cannot be disabled. Admins can create popups regardless of how the app

sending the notification prioritizes its notification channel.

Monitoring Workspace ONE Launcher Status

The Device Details page in the console displays the status of Workspace ONE Launcher on a

device which helps you quickly and easily view and check the Launcher status on multiple devices.

When the Workspace ONE Launcher is pushed to devices under a standard Android deployment,

the Launcher is set as the default with no additional steps required from the user. For Android

(Legacy), most OEMs will push the Launcher automatically with the help of the signed service such

as the Platform OEM Service (POEM).

The Launcher status only displays when the following criteria is met:

n User is multi-user staging user

n Launcher payload is assigned to the device through Profiles or Products.

The status will show as follows:

Status

Description

Launcher is the Home App Workspace ONE Launcher is set at the default launcher for the devices.

Launcher is not set as the home

app or is not installed

This status indicates the profile push failed, did not install, or is not set as the

default launcher on the selected device. If Launcher fails, you can check the

network requirements for CDN to make sure it is up to date.

Apps for Workspace ONE Launcher

Workspace ONE UEM classifies applications as internal, public, and miscellaneous and you upload

applications depending on the type.

Public and internal apps are pulled from your managed apps list from Apps & Books menu in the

Workspace ONE UEM console. Miscellaneous apps are only used for built-in native device apps.

You will need the Application Name and Application ID to allow-list miscellaneous apps.

Note: When deploying Workspace ONE Launcher with Android for Work, make sure apps are

approved for Android.

Workspace ONE Launcher

VMware, Inc. 13

Approve Applications for Android

Approve applications for integration so that you can upload them to the Workspace ONE UEM

console.

1 Navigate to Google Play for Work, https://play.google.com/work.

2 Login to the site using an Enterprise account for Google Play for Work.

3 Search for applications you want to add to the integration and select the Approve option.

4 View the permissions for the applications and follow the prompts to confirm approval. Check

to make sure the application has been imported after approval.

Bookmarks

Bookmarks provide users a simple way to access a URL directly from the Workspace ONE

Launcher home screen. The end-user sees the bookmark icon and title similar to any other app

on the Launcher home screen. When a user taps on a bookmark icon, Launcher navigates to the

specified URL.

In addition to navigating to any webpage, you can use these icons to connect to internal content

repositories or login screens without having to open a browser and type out a long URL.

Adding bookmarks differ based on the enrollment method of your device fleet.

How to Add Bookmarks for Android

You can add bookmarks in two ways. To create a web application:

1 Navigate to Resources > Apps > Native > Public > Add Application and select Android from

the Platform field.

2 Select Next. The Google Play store appears.

3 Once the Google Play store opens, add a web app by using the plus sign in the bottom right.

4 Complete the app details, select Next, then click on the icon for the web app you just created.

5 Assign the web app as you would any other native application.

6 To add it to the Launcher screen, navigate to the Native tab in the Launcher configuration

screen and drag this icon to the home screen.

Note: The native web app is only accessible through Google Chrome so be sure to add Google

Chrome to the home screen or as a hidden app.

To create a web link:

1 Navigate to Resources > Apps > Web Links > Add Application

2 Select Android as the platform.

3 Fill in the necessary fields and assign the web link to your target users.

Workspace ONE Launcher

VMware, Inc. 14

4 To add it to the Launcher screen, navigate to the Bookmarks filter in the Launcher

configuration screen and drag this icon to the home screen.

Note: Modifying a web link bookmark will remove it from the Launcher grid layout and

require you to re-add it.

Template Mode Settings

Template Mode is a customizable mode of Workspace ONE Launcher. You can add apps, images,

text, and other layout settings to customize a device locked down in kiosk mode with Template

Mode.

Template Mode Settings- Basic Properties

Setting Description

Size Drag the borders of the widget to adjust size of the icon.

Position Move the widget around the canvas to adjust the placement on the template.

Template Mode Settings - App Selection

Setting

Description

Filter App List Search for Public, Internal, or Miscellaneous apps to add to the Launcher profile. For Public

and Internal apps, select the desired apps that appear in the filtered list. These apps are pulled

from your managed apps list from Apps & Books menu in the Workspace ONE UEM console .

The Public and Internal apps are not whitelisted through Miscellaneous apps. Miscellaneous

apps are only used for native device apps.

To add

Miscellaneous apps

Select Add an App and enter the Application Name and Application ID under the Miscellaneous

option. Select the app to add it to the Launcher preview

Template Mode Settings - Text Properties

Setting

Description

Text Enter the text display. The default text displays as Label View.

Text Color Change the text color by selecting the color icons and selecting the desired color.

Background Color Change the background color by selecting the color icon and selecting the desired color.

Text Position Align the text in the desired area by selecting the circle from the box.

Font Weight Select Bold or Normal.

Underline Select Yes or No to underline the text.

Font Style Select Normal or Italic.

Font Size Move the bar to determine the size of the text.

Template Mode Settings - Background Properties

Workspace ONE Launcher

VMware, Inc. 15

Setting Description

Background Image Select Upload to load an image file from your desktop.

Background Image Size Select Fit To Wrapper, Keep Original, or Keep Aspect Ratio.

Aspect Ratio Size Move the bar to determine the aspect ratio. This option only applies if you have selected

to Keep Aspect Ratio from the Background Image Size field.

Background Image Position Align the app in the desired area by selecting the circle from the box.

Template Mode Settings - App Icon Properties

Setting Description

App Image Size Select Fit To Wrapper, Keep Original, or Keep Aspect Ratio.

App Aspect Ratio Move the bar to determine the aspect ratio. This option only applies if you have selected to Keep

Aspect Ratio from the App Icon Size field.

App Icon Position Align the app in the desired area by selecting the circle from the box.

Administrative Passcode

The administrative passcode allows users to access the device menu to add applications or to

exit from the Workspace ONE Launcher mode. The passcode is required to perform all actions in

Admin Mode from the device.

The Preference tab from each app mode allows you to establish the passcode. The Persist Admin

Passcode If Kiosk Profile is Removed From Device check box prompts the user for the admin

passcode if they are attempting to remove the Launcher profile from their device.

If someone tries to use the Exit Launcher setting from the device and enters the Administrative

Passcode incorrectly, the option disappears after 10 unsuccessful attempts, you can restart the

device and the option reappears.

There are two use cases for this option:

n Remove Profile – Removes the Workspace ONE Launcher profile from the device. This option

restricts users from using any launcher apps and the device will be locked down and display a

standard screen saver

n Check In/Check Out – Displays the Check Out credentials page when a user checks in a

device after use. The user can access device side functions but not Launcher apps or settings.

Workspace ONE Launcher

VMware, Inc. 16

Custom XML for Workspace ONE

Launcher

Use the Custom Settings payload to send XML code that enables or disables specific Launcher

settings. Some Launcher features can only be configured through XML pushed through the

custom settings payload. In addition, many Launcher features are released for configuration

through XML before the native toggles are added to the Launcher profile payload.

For each <characteristic> tag added under custom settings, define a unique UUID to avoid

conflict errors. If two custom settings are targeting the same application and have the same UUID,

only one of the settings will be processed on the device.

To avoid conflict errors with Launcher targeted XML, you can add multiple XML parameter tags

into one characteristic tag. For example,

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Be sure to use the correct characteristic type depending your profile type:

n For Android profiles, use characteristic type =

"com.airwatch.android.androidwork.launcher".

n For Android Legacy profiles, use characteristic type =

"com.airwatch.android.kiosk.settings".

Below are Launcher features admins can enable through custom XML:

This chapter includes the following topics:

n Allow Split-window Mode Inside Launcher

n Restart Device Setting

n Use Settings Wi-Fi Action

n Add Hub To Force Stop Blacklist

n Hide Settings Option from Single App Floating Action Button

n Override the duration that Launcher shows the Clearing Data Screen

n Enable Dark Mode

VMware, Inc.

n Disable Launcher's Search Bar

n Enable Flashlight

n Enable Launcher Widgets

n Disable FocusMonitoring API

n Show Popup Notifications

n Hide Enable Notifications Button

n Disable Sensor Orientation

n Speed Lockdown

n Write Settings Permission

n Skip overlay permission screen

n Actionbar Settings

n Wallpaper Scale Type

n Staging Admin Passcode

n Allowlist Activities on Check-in Check-out Screen

n Allow Log Collection

n Allow Staging Profile

n Force Reset Launcher Layout on Profile Update

n Set Launcher as Default after Reboot

n Allow Staging Settings

n Customize Floating Home Button

n Remove Floating Home Button

n Enable Floating Home Button

n Customize Single App Floating Action Button

n Allow Localized App Names

n Skip Usage Access Permission

n Use Legacy Launcher Methods (Skip COSU Setup)

n Selective App Cache Clearing

n Restrict Folder Renaming

n Add Custom Device Settings

n Launcher Branding

n Allowlist Specific App Activities

n Remove Welcome Screen

Workspace ONE Launcher

VMware, Inc. 18

n Inactivity Timer

n Hot Swap Profile Caching:

n Allow WebView inside Launcher:

n Dynamically add shortcuts to Launcher screen:

n Open Native settings in tablets:

n Clear Application Defaults

n Boot Up Launchers

Allow Split-window Mode Inside Launcher

Split-screen mode fills the screen with two apps, showing them either side by side or one above

the other. Configure the below custom setting to allow end users to open apps in split-window

mode. By default, this feature is disabled.

Admin has to note that if we allow split-window then on Samsung devices users can open any app

in the pop-up view. Launcher will not be able to block the pop-up view if we use the below custom

XML.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="548bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Restart Device Setting

If you want to let users restart Launcher, enable this setting. By default, the "Restart Launcher" is

not available to end users.

To enable this settings, use the following XML code:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="548bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Use Settings Wi-Fi Action

On some tablets, the Action WifiManager.ACTION_PICK_WIFI_NETWORK is not working

correctly. To resolve this problem, use this custom XML to force Launcher to uses

Settings.ACTION_WIFI_SETTINGS.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

Workspace ONE Launcher

VMware, Inc. 19

</characteristic>

Add Hub To Force Stop Blacklist

On some Samsung devices, Workspace ONE Intelligent Hub was force stopping resulting

in Workspace ONE Launcher not getting focus monitor broadcasts. Launcher needs these

broadcasts to block applications. Use this custom XML to add Workspace ONE Intelligent Hub

to the force stop blacklist:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Hide Settings Option from Single App Floating Action

Button

Available in Workspace ONE Launcher 21.10+

The new single app floating button presents quick access to settings, the Launcher menu, and the

logout button. To hide the settings button from the expanded menu, use the following custom

XML:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Override the duration that Launcher shows the Clearing

Data Screen

Available in Workspace ONE Launcher 21.10+

Launcher shows the clearing data screen while queuing the commands to clear app data. To

override the duration that Launcher shows this screen, use the following XML. This may be desired

to ensure any asynchronous tasks like profile removal is completed before the next user checks

out the device.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Workspace ONE Launcher

VMware, Inc. 20

Enable Dark Mode

Available in Workspace ONE Launcher 21.09 or later

Enable Launcher's dark mode to apply Launcher's dark theme and change the home screen icons

and labels to white.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Disable Launcher's Search Bar

Available in Workspace ONE Launcher 21.09 or later

Hide Launcher's search bar. The search bar allows users to search for applications on the home

screen across pages and folders.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Enable Flashlight

Available in Workspace ONE Launcher 21.09 or later

Add the flashlight toggle to the quick access section in the Launcher menu.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Enable Launcher Widgets

Available in Workspace ONE Launcher 21.09 or later

Launcher widgets allow admins to truly create tailored experiences for their end users. In

Launcher 21.09, you can create two types of widgets using custom settings.

1 Custom Attribute Widget:

a Parameters:

1 Displayed Title

2 Icon Name

3 Lookup Value in UEM

Workspace ONE Launcher

VMware, Inc. 21

2 HTML Widget

a Parameters:

1 Displayed Title

2 Icon Name

3 Height (in px)

4 Type ("0" for Minimized, "1" for Descriptive)

Try out our custom settings XML sample.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

<parm name="ForYouWidgets" value="

{

"ForYouWidgets":

[

{

"label": "Device UUID",

"type": "lookupvalue",

"value": "{DeviceUid}",

"icon": "ic_media_device"

{

"label": "Group Identifier",

"type": "lookupvalue",

"value": "{GroupIdentifier}",

"icon": "ic_media_folder"

{

"label": "DeviceOperatingSystem",

"type": "lookupvalue",

"value": "{DeviceOperatingSystem}",

"icon": "ic_media_tasklist"

{

"label": "Hub Support",

"type": "htmlwidget",

"value": "https://mpaterno.github.io/",

"height": "300",

"icon": "ic_navigation_settings_gear",

"viewType": "0"

{

"label": "Scan to Fetch Device ID",

"type": "htmlwidget",

"height": "300",

"value": "https://chart.googleapis.com/chart?

chs=150x150&cht=qr&chl={DeviceUID}","icon":

"ic_media_device",

"viewType": "0"

}

]

Workspace ONE Launcher

VMware, Inc. 22

}"/>

</characteristic>

Disable FocusMonitoring API

Available in Workspace ONE Launcher 4.9 or later

On Samsung devices, Launcher defaults to using the Samsung Focus Monitoring API. This allows

Launcher to automatically foreground applications without the user having to grant the Android

Usage Access Permission. The admin can disable this feature using the following custom XML.

Disabling this feature on Samsung devices will require users to grant the usage access permission

on the first launch of Launcher.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Show Popup Notifications

Available in Workspace ONE Launcher 4.8 or later

Admins can generate popup notifications regardless of channel priority using this custom XML. To

show popups, the notification bar cannot be disabled. Admins can create popups regardless of

how the app sending the notification prioritizes its notification channel.

After Android O, popups will only show if the app sending the notification sets a notification

channel to show popups, but this custom XML bypasses that behavior.

For generating popups for all allowed apps:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

For generating popups for specific apps:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

<parm name="ShowPopupNotification" value="com.application1.package,

com.application2.package"/>

</characteristic>

Hide Enable Notifications Button

Available in Workspace ONE Launcher 4.8 or later

Workspace ONE Launcher

VMware, Inc. 23

Admins can hide the “Enable Notifications” button from the Launcher dropdown menu by using

the following custom XML.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Disable Sensor Orientation

Available in Workspace ONE Launcher 4.8 or later

Use this setting to prevent the device from switching to reverse portrait mode or reverse

landscape orientation. To ensure this permission has been granted, admins can push the prompt

write setting permission custom XML.

This feature requires the write settings permission to set orientation device-wide.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Speed Lockdown

Available in Workspace ONE Launcher 4.7 or later

Use this custom XML to block device access when exceeding a specified speed threshold.

<parm name="SpeedLockdownSettings" value="{"speed":"20",

"unit":"0", "timeThreshold":"10000",

"troubleshootPasscode":"1234", "headerText":"Too

Fast", "messageText":"Stop to unlock"}" />

The default values are as followed:

n Unit = 1 (m/h)

n TimeThreshold = 5000 (5 seconds)

n HeaderText = "Device Locked"

n MessageText = "Come to a complete stop to unlock device"

The accepted values are as followed:

n Speed > 0

n Unit = 0 - km/h , 1 - m/h (default = m/h)

n TimeTheshold > 0 (in milliseconds)

n TroubleshootPasscode (length > 0)

Workspace ONE Launcher

VMware, Inc. 24

n HeaderText (length > 0 chars < 15 chars)

n MessageText (length > 0 chars < 30 chars)

Write Settings Permission

Available in Workspace ONE Launcher 4.6 or later

Use this custom XML to show the "Write Settings Permission" prompt during initial setup. Note,

the write settings permission allows users to modify settings you give access to. This permission

is already required for screen orientation lock changes to take effect device-wide. By default, the

write settings permission is requested when a user attempts to modify settings.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Skip overlay permission screen

Available in Workspace ONE Launcher 4.6 or later

Use this custom XML to hide the 'Draw over other apps permission" prompt during initial

setup. Note, the draw over permission is required for adding overlays and blacklisting apps.

Using Launcher without the Draw over permission (or Appear on Top permission) could disable

Launcher's ability to block restricted applications and features.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Actionbar Settings

Available in Workspace ONE Launcher 4.6 or later

You can customize the CICO action bar's behavior by using the following custom XML.

1 If you would like to retain the value of the action bar title from the previous user, set the

retainChildTitle parameter to True. Note, retaining the child title will also retain calculated

lookup values from the previous user.

2 The defaultTitle parameter defines the title value for when no previous user has yet checked

out the device.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

<parm name="ActionBarSettings"

value="{"retainChildTitle":"True", "defaultTitle":"Vmware

Workspace ONE Launcher

VMware, Inc. 25

- Airwatch"}" />

</characteristic>

Wallpaper Scale Type

Available in Workspace ONE Launcher 4.5 or later

By default, Launcher stretches the Home Screen wallpaper to fit the different aspect ratios for

landscape or portrait. Use the following custom XML to define different wallpaper scale methods

for landscape and portrait.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

<parm name="WallpaperScaleType"

value=" {"portraitScaleType":"FIT_CENTER",

"landscapeScaleType":"FIT_XY"}"/>

</characteristic>

Staging Admin Passcode

Available in Workspace ONE Launcher 4.4.1 or later

Use this custom XML to enable the admin mode option on the check-in check-out screen. Users

can exit the Workspace ONE Launcher from the check-in/check-out screen by entering the

password specified in XML. After checkout, the admin passcode will be replaced by the end user

profile admin passcode. Assign this custom XML to the staging user:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Allowlist Activities on Check-in Check-out Screen

Available in Workspace ONE Launcher 4.4 or later

Allow specific activities that Launcher may otherwise block when on the check-in check-out screen

(when Launcher is assigned to the staging user). This includes native popups or UI elements. Use

the following custom XML by specifying the package name and class name. Assign this custom

XML to the staging user.

This feature requires the Appear on Top (Draw Over Other Apps) Permission and Usage Access

(or Focus Monitoring on Samsung) Permission.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

<parm name="AllowStagingActivities" value="{"AllowStagingActivities":

[ {"pName": "com.android.settings","cName":

"com.android.settings.LanguageSettings"},

Workspace ONE Launcher

VMware, Inc. 26

{"pName": "com.android.settings","cName":

"com.android.settings.WifiPicketActivity"} ]}"/>

</characteristic>

Allow Log Collection

Available in Workspace ONE Launcher 4.4 or later

If admin wants to collect logs for a certain use case or in certain scenarios, use this custom XML

and request the debug logs from the Workspace ONE UEM console:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec"><parm name="AllowLogCollection" value="True"/></characteristic>

Allow Staging Profile

Available in Workspace ONE Launcher 4.2.1 or later

If the customer assigns a single profile to all the users at the parent Organization Group level, then

use this custom XML:

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="AllowStagingProfile"

value="True"/></characteristic>

The above custom setting has multiple parameters:

n activityName: When this parameter is added the overlay appears only when the settings are

accessed through the particular activity.

n portraitpercentage: This parameter configures the overlay percentage in portrait mode.

n transparency: This parameter configures the overlay transparency in terms of percentage.

n landscapePercentage: This parameter configures the overlay percentage in landscape mode.

Force Reset Launcher Layout on Profile Update

Available on Workspace ONE Launcher 4.2 or later

Use this custom XML to reset the Launcher Home Screen layout to the admin configured layout

with every profile update. By default, Launcher preserves any app rearrangement on the device

after profile updates.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Workspace ONE Launcher

VMware, Inc. 27

Set Launcher as Default after Reboot

Available on Workspace ONE Launcher 4.2 or later

This custom XML allows Workspace ONE Launcher to open and lockdown the device after reboot

regardless of the previous state. By default, if Launcher was in admin mode or un-pinned to the

Home Screen before the device was rebooted, the device reboots to the default native Launcher.

This setting only applies to Honeywell, Zebra and Samsung devices.

In cases where the launcher opens after a delay, the length of time can be defined in seconds in

the XML below:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

</characteristic>

Allow Staging Settings

Available in Workspace ONE Launcher 4.1 or later

In Workspace ONE Launcher, the option of toggling Wi-Fi is only available in the staging screen.

If a user wants to configure Wi-Fi settings, long press on the Wi-Fi icon to launch the native Wi-Fi

settings. Since this setting has to be accessed in the staging screen, the below custom xml must be

pushed for the staging user \parent organization group). This can be configured by using below

flag.

Enabling access to a specific settings page requires the Appear on Top (Draw Over Other Apps)

Permission.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

Customize Floating Home Button

Available with Workspace ONE Launcher4.0 or later

Admins can enable Launcher's floating home button to serve as a dedicated home button when

the native home button is unavailable. Note, the floating home button only applies to multi-app

and template mode.

By default, Launcher running on Android 8 and below devices does not support displaying a home

and recent apps button. In this case, Launcher defaults to displaying the floating home button.

Note, admins can enable Launcher's legacy methods to re-enable the home and recent apps

button (see Enable Launcher's Legacy Methods).

<characteristic

type="com.airwatch.android.androidwork.launcher"

Workspace ONE Launcher

VMware, Inc. 28

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="HomeFloatingButtonSetting"

value="{"Size":"Small","Color":

"#F377F7","TimeToFade":"5","FadeValue":"3"}"

/></characteristic>

Admins can customize the floating home button using this custom XML.

n Size: Indicates the size of the Floating Home button. The possible values: Small, Medium,

Large.

n TimetoFade: Indicates the time in seconds for Floating Home button to fade away.

n Color: Indicates the color of the Floating Home button. color must be specified in a Hex code

Eg: #F377F7.

n FadeValue: Indicates the amount of fading required.

Remove Floating Home Button

Available with Workspace ONE Launcher 4.0 or later

Use the following custom XML to disable the floating home button.

Note, the floating home button serves as an alternative home button when the native home button

is unavailable.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

Enable Floating Home Button

Available with Workspace ONE Launcher 4.0 or later

On some devices, the native Android home button may be inaccessible. You can use this custom

XML to manually display a floating home button in multi-app mode.

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="AllowHomeFloatingSetting"

value="True"/></characteristic>

Customize Single App Floating Action Button

Available with Workspace ONE Launcher 4.0 or later

In Single application mode, Launcher provides a Floating Action button for users to access

different launcher settings. This button can be configured by using the below setting:

Workspace ONE Launcher

VMware, Inc. 29

This feature requires the Appear on Top (Draw Over Other Apps) Permission.

<characteristic

type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-

e5a24acdb7ec"><parm name="SingleAppFloatingButtonSetting"

value="{"Size":"Small","TimeOut":

"2","FixPosition":"true"}"/></characteristic>

n Size: Indicates the size of the floating action button. Possible values: Small, Medium, Large.

n Timeout: Indicates the time in seconds for floating button to fade away. Should be an integer

only.

n FloatingTimeoutValue custom flag is now deprecated from version 4.0 instead we should use

this flag.

n FixPosition: When enabled, the user cannot move the floating action button. It is positioned

at the right end corner. This setting replaces the FixSettingsPosition from previous versions.

Allow Localized App Names

Available with Workspace ONE Launcher 4.0 or later

By default, application names in Launcher populate according to the app name set in the console.

Use this custom XML to localize app names based on the device's language setting.

<characteristic

type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="AllowLocalizedAppNames"

value="True"/></characteristic>

Skip Usage Access Permission

Available with Workspace ONE Launcher 4.0 or later

Admins use Launcher to prevent access to blocked apps and content. To detect which app

is in the foreground, Launcher uses the advanced permission, usage access. On initial setup,

if Launcher cannot grant the permission on behalf of the user, Launcher prompts the user to

manually grant the permission. Some device OEMs require device end users to grant apps with

usage access permission on their devices.

Admins can use this custom XML skip the usage access permission prompt. However, by doing so,

Launcher may not gain usage access and may not be able to block manage device access.

<characteristic

type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="SkipUsageAccessPermission"

value="True"/>

</characteristic>

Workspace ONE Launcher

VMware, Inc. 30

Use Legacy Launcher Methods (Skip COSU Setup)

Available with Workspace ONE Launcher 4.0 or later

Enabling this feature allows Launcher to use Workspace ONE's legacy methods in place of native

Android's lock task APIs for device lockdown. Starting with Launcher 4.0, Launcher uses lock task

mode by default to restrict device access.

<characteristic

type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="SkipCosuSetup"

value="True"/></characteristic>

Devices running Android 8 and older may have the status bar, home button, and recent tasks

button disabled by default while in lock task mode. Other apps on the device may also require

control over lock task mode. In these cases, admins can enable Launcher's legacy methods using

this custom XML to manage legacy devices or ensure Launcher works correctly with other lock

task apps.

Selective App Cache Clearing

Available with Workspace ONE Launcher 3.3 or later

The Workspace ONE UEM console setting labeled "Clear App data on logout" clears the data of all

assigned applications after logging out. Admins can specify package IDs to skip clearing by using

the following XML:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

parm name="DonotClearAppDataSet" value="com.airwatch.browser,com.samsung.klmsagent"/>

</characteristic>

Restrict Folder Renaming

Available with Workspace ONE Launcher 3.3 or later

Admins can restrict users from renaming folders by using the following custom XML. By default,

Launcher enables users to rename and rearrange the app canvas.

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="DisableFolderRename"

value="True"/></characteristic>

Add Custom Device Settings

Available with Workspace ONE Launcher 3.2 or later

Admins can provide access to any native settings menu by defining the package and class name.

These settings will populate as a row item in the Launcher settings page.

Workspace ONE Launcher

VMware, Inc. 31

This feature requires the Appear on Top (Draw Over Other Apps) Permission and Usage Access

(or Focus Monitoring on Samsung) Permission.

Required Parameters:

n SettingName to be displayed on Launcher settings screen.

n Packagename and classname or Action name of the desired native setting.

Settings activity actions can be found in Android Settings Documentation. Use the Constant Value

for the action value.

If only Action is used:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

<parm name="CustomSettings" value="

{

"CustomSettings": [

{

"name": "Location Settings",

"action":

"android.settings.LOCATION_SOURCE_SETTINGS"

}]

}"/>

</characteristic>

If packageName and class name is used:

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

<parm name="CustomSettings" value="

{

"CustomSettings": [

{

"name": "Manage Applications Settings",

"pName": "com.android.settings",

"cName":

"android.settings.MANAGE_APPLICATIONS_SETTINGS"

}]

}"/>

</characteristic>

For additional information, please see the Android Developer Settings page.

Launcher Branding

Available with Workspace ONE Launcher 3.2 or later

Provides a proper combination of Action Bar color and Status Bar color (Light and dark) as

recommended by Google. You may set different colors according to you company’s brand colors .

Workspace ONE Launcher

VMware, Inc. 32

Auto Branding: If you do not want to specify individual colors you can use this flag. In order for

this to work, title bar icon (logo) must be present.The extracted colors for branding are from the

company logo.

To enable and implement this feature the below flag must be pushed down through the custom

settings payload:

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="eadfebd8-7f4c-4837-b9dd-dfcf31bd84e6">

<parm name="AllowAutoBranding"

value="true" />

</characteristic>

To personalize, then you can specify the title bar color, title text color, primary accent color, status

bar color, and highlight color. Colors must be specified in hexadecimal color format:

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="eadfebd8-7f4c-4837-b9dd-dfcf31bd84e6"><parm name="AllowBranding"

value="

{"titleColor":"#FC002E","titleTextColor":

"#F377F7","accentColor":"#36E712","highlightColor":&qu

ot;#4E993E","statusBarColor":"#FC002E"}"/>

</characteristic>

Allowlist Specific App Activities

Available with Workspace ONE Launcher 3.2 or later

Allow specific app activities to come to the foreground that Launcher may otherwise block. This

includes native popups or UI elements. Use the following custom XML by specifying the package

name and class name.

This feature requires the Appear on Top (Draw Over Other Apps) Permission and Usage Access

(or Focus Monitoring on Samsung) Permission.

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

<parm name="CustomActivities" value="

{

"CustomActivities": [

{

"pName": "com.android.settings",

"cName":

"com.android.settings.localepicker.LocalePickerWithRegionActivity"

{

"pName": "com.android.settings",

"cName":

"com.android.settings.Settings$WifiNetworkDetailsActivity"

}]

Workspace ONE Launcher

VMware, Inc. 33

}"/>

</characteristic>

Remove Welcome Screen

Available with Workspace ONE Launcher 3.2 or later

In older versions, Launcher displays a welcome screen when it is pushed to the device. This can be

removed by clicking the “Dismiss” (Cancel) button on the right lower corner. The below flag can

be used to remove the Welcome screen.

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="RemoveWelcomeScreen"

value="True"/>

</characteristic>

Inactivity Timer

Available with Workspace ONE Launcher 3.2 or later

Admins can specify an amount of time in which the device will automatically lock the Launcher

screen and require the previously signed in user to re-enter their password to re-access the

Launcher screen. If a new user wants to unlock a device that is locked into another users account,

they can log out the previous user and sign in as themselves.

Note, this feature is not compatible with Workspace ONE Access CICO Integration.

To enable and implement this feature, the setting must be pushed down through the custom

settings payload:

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="InActivityLock"

value="True"/>

</characteristic>

Admins can also specify a list of apps that can run in the foreground while the inactivity

lock is enabled. (Requires 21.09 or later)

<characteristic type=“com.airwatch.android.androidwork.launcher” uuid=“568bc89d-1df8-4ce9-

a041-e5a24acdb7ec”>

</characteristic>

Admins can specify the timeout value in minutes using the following extra parameter.

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="InActivityLock"

value="True"/>

Workspace ONE Launcher

VMware, Inc. 34

<parm name="InActivityTimeout"

value="10"/>

</characteristic>

Hot Swap Profile Caching:

Available with Workspace ONE Launcher 3.2 or later

As check in/check out is done frequently, users often check out the same device but have to wait

for a considerable amount of time for the profile to get applied after checking out. Workspace

ONE can expedite this by caching profile per user when the user checks out that particular device

for the first time.

Note, user profile caching is only supported via UEM basic user authentication.

To enable and implement this feature, the setting must be pushed down through the custom

settings payload:

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="CacheProfile"

value="True"/>

</characteristic>

Allow WebView inside Launcher:

Available with Workspace ONE Launcher 3.2 or later

Launcher's built in web view is disabled by default, requiring a browser to be installed and allowed

to open web bookmarks. Admins can enable the built-in browser using the following custom XML.

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="AllowBuiltInBrowser"

value="True"/>

</characteristic>

Dynamically add shortcuts to Launcher screen:

Available with Workspace ONE Launcher 3.2 or later

Admins can display a shortcut to an app activity on Launcher's home screen by using the below

flag by specifying the "shortcut name, package name, activity name" or "shortcut name, action

name".

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-

a041-e5a24acdb7ec">

<parm name="CustomShortcuts" value="{"CustomShortcuts":

[{"name":" Manage Applications

Settings","pName":"com.android.settings","cName":

Workspace ONE Launcher

VMware, Inc. 35

"com.android.settings.Settings$DateTimeSettingsActivity"},

{"name": "Locale Settings","pName":

"com.android.settings","cName":

"com.android.settings.Settings$LocalePickerActivity"}]}"/>

</characteristic>

Open Native settings in tablets:

Available with Workspace ONE Launcher 3.2 or later

In some of the tablets, native settings such as Wi-Fi, Bluetooth, Language etc. are opened in a

fragmented view which allows users to access other settings as well, in such a case user can easily

get out of launcher. So, by default, Launcher does not allow users to open settings unless they use

the below flag. If the admin thinks that it is safe to open native settings in that particular tablet then

he can use this flag and all the native settings which are allowed can be accessed. This is usually

used along with dynamically allowed list settings flag (CustomSettings), custom shortcuts, custom

activities and for notification access.

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="CanLaunchNativeSettings"

value="True"/>

</characteristic>

If you on want a particular native setting to be accessed and not other settings, use the

flag: forceLaunch. This flag is used individually with each setting. If admin uses the flag:

canLaunchNativeSettings,then all the allowed native settings can be accessed. If you want a

particular setting, use the forceLaunch flag. This is usually used along with dynamically allow list

setting flag (CustomSettings), custom shortcuts, custom activities and for notification access.

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="CustomShortcuts"

value="{"CustomShortcuts": [

{"name": "Manage Applications

Settings","forceLaunch": "true","pName":

"com.android.settings","cName":

"com.android.settings.Settings$DateTimeSettingsActivity"},

{"name":

"Locale Settings","pName":

"com.android.settings","cName":

"com.android.settings.Settings$LocalePickerActivity"}

]}"/></characteristic>

In the above XML (Customshortcuts) both Manage Applications and Locale Settings shortcuts will

be visible on the Launcher screen, but users can only access Manage Application settings since it

uses the forceLaunch flag.

The flagsforceLaunch or canLaunchNativeSettings must be present for custom settings to be

visible on Launcher settings screen.

Workspace ONE Launcher

VMware, Inc. 36

Clear Application Defaults

Available with Workspace ONE Launcher 3.2 or later

When opening a media file, Android presents a dialog with all the applications which support that

particular format. If an end-user chooses an application as the default application, then files of the

same media type are opened by this default application. Admins can configure Launcher to clear

application defaults on session check-ins.

This API is only supported by certain OEMs. We recommend testing your use case before

deployment.

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="AllowClearAppDefaults"

value="True"/>

</characteristic>

In some devices, Workspace ONE cannot clear application defaults automatically. For those

cases, admins can present the user with a prompt to clear application defaults manually. This

will navigate the user to a native settings screen to clear the appllication defaults.

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="CannotClearAppDefaults"

value="True"/>

</characteristic>

Boot Up Launchers

Available with Workspace ONE Launcher 3.2 or later

There are some boot up application which run after the device is restarted. These boot up

applications are getting allowed even though they are not allowed on the UEM console.

Workspace ONE maintains a list of allowed applications in the Launcher profile, but after reboot

Workspace ONE Launcher takes some time to load this profile.

To prevent the application from being allowed, you can provide the package name of all the boot

up application which are to be allowed.

<characteristic type="com.airwatch.android.androidwork.launcher"

uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="BootupLauncher"

value="com.sonyericsson.initialbootsetup, com.sonyericsson.setupwizard,

com.honeywell.systemtools.autoinstall/>

</characteristic>

Workspace ONE Launcher

VMware, Inc. 37

Launcher Device Settings Matrix

for Android Deployment

The Settings section of each VMWare Launcher allows you to set an administrative passcode,

establish icon settings, and enable/disable various functions of the Launcher profile for Android

device owner deployment. Available preferences vary based on the selected mode you are

configuring.

The following matrix compares the Launcher device capabilities across the different app modes.

Some settings are dependent on additional factors such as permissions and COSU mode

limitations and are denoted as such.

Key:

n Usage Access: Requires Usage Access permission.

n COSU mode: COSU setup removes certain features for security to prevent users escaping out

of Lock mode.

Note: Usage Access permission is only required on non-Samsung devices. Usage Access

permission for Samsung devices is a native feature requiring no prompt on the following devices:

n Samsung SAFE MDM 5.4

n For Android (Legacy) Work Profile - Launcher 3.0 and Workspace ONE Intelligent Hub 7.1 is

required.

n For Android Work Managed devices - Launcher 3.0 and Workspace ONE Intelligent Hub 9.0.1

is required.