Configure Olvid in Workspace ONE

In this section, we assume that your user devices are enrolled and managed in Intune. For Android, this corresponds to personal devices with a Work Profile or Fully Managed corporate-owned devices. The iOS documentation for Workspace ONE is not available yet.

1. Install and configure Olvid on the devices

Before being able to configure Olvid with Workspace ONE, the Olvid app must be added to the list of approved native apps.

• open Workspace ONE UEM
• open Apps & Books > Applications > Native and select the “Public” tab

• click the Add Application button and:
  • select Android for the Platform
  • enter olvid for the Name
  • click Next

  

• Click on Olvid in the store page that opens, then click the “Approve” button and confirm approval in the dialogs that open

• An “Edit Application” dialog opens to customize the way Olvid is displayed to your users in the Google Play store. The default settings should be ok, so you can click “Save & Assign”

• An Olvid - Assignment dialog opens
  • In the Distribution tab,
    • enter something like “Olvid for Android” as the Name
    • you may add a description if you want
    • in “Assignment Groups”, choose on which devices you want Olvid to be installed: choose “All Devices” to allow the installation and configuration of Olvid on all enrolled devices
    • choose the “App Delivery Method”: “Auto” forces the installation of the app on the selected devices

  

  • In the “Application Configuration” tab
    • activate the “Send Configuration” switch
    • For the field “Keycloak configuration”, enter the keycloak configuration link you can retrieve from the Olvid Management Console (in the user realm dashboard page)

  

  • click on “Create”, then on “Save”, then on “Publish”

That’s it, Olvid will be installed automatically (or manually depending on your choice) on all selected devices, and once a user opens Olvid, your keycloak server will be automatically configured for him.

The first time your users launch Olvid, they should see the following screen, directly prompting them to authenticate, instead of the usual blue startup screen:

2. Automatically grant required permissions to Olvid

When using Olvid, users will occasionally be prompted for permissions to access the camera (for example, when scanning a QR-code), or to record audio (for example, when starting a phone call). It is possible to simplify Olvid’s usage for your users by automatically granting such permissions through Workspace ONE by adding a Profile.

• From Workspace ONE UEM, open Devices > Profiles & Resources > Profiles and click the “Add” button at the top

• from the dropdown select “Add profile” and click “Android” in the dialog the opens
• choose a name for this profile, something like “Permissions for Olvid on Android” and scroll down the list to click “Add” on the “Permissions” item

• Now in the “App 1” tab, enter olvid in the “Search an app” field and Olvid should appear in the dropdown. Select it

• you may now select Grant permission for all relevant items. Note that most of these items do not in fact prompt the user for permissions as some permissions are automatically granted by Android. The important ones are:
  • “android.permission.BLUETOOTH_CONNECT” (for bluetooth headset phone calls on Android 12 and up)
  • “take pictures and videos” (for QR code scanning)
  • “read phone status and identity” (to mute Olvid phone calls when an traditional GSM call is in progress)
  • “record audio” (for Olvid phone calls and voice messages)
  • “android.permission.SCHEDULE_EXACT_ALARM” (to allow timely expiration of ephemeral messages on Android 12 and up)
• click “Next” and select which devices to assign this profile to.
• click “Save & Publish”

You can check that the profile is properly configured on you user devices by opening the Workspace ONE Intelligent Hub application on your phone:

• open the “Support” tab
• tap on your device
• tap on “Profiles”
• the profile you created should be listed as “Installed”

Of course, synchronization with the Workspace ONE server is needed and may take some time. You may tap “Sync Device” in the “Device details” screen to speed things up!