459 results found

1. Multiple DEP

   Multiple DEP account / configurations.

   I have two classes of devices that we need to manage. One set is very locked down and supervised. The other we don't want to be supervised and just want some basic management. It's a bit painful right now to work around this and we'd love to be able to register sets of devices with different DEP accounts directly on Apple's site.

   8 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   completed  ·  1 comment  ·  Delete…  ·  Admin →

2. Include device vs. user profile and attribute support for custom configuration profiles in API

   Include the status of the "For macOS devices, deploy as a device profile instead of a user profile" and "Enable attribute support" checkboxes for custom configuration profiles in the API. The ability to check the current status (i.e., whether these are true or false), set/change them, and set them when uploading custom config profiles through the API would be useful.

   8 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   completed  ·  0 comments  ·  Delete…  ·  Admin →

3. Allow Download of Custom Profiles via API

   Allow Download of Custom Profiles via API

   • beneficial for scheduled tasks/audits
   • would complete the custom profile support via API (upload/download)
   8 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   completed  ·  0 comments  ·  Delete…  ·  Admin →

4. Support 'SetRecoveryLock' and 'VerifyRecoveryLock' commands via Portal and API

   As well as show specific macOS information in the device info as its available, ie 'IsRecoveryLockEnabled'.

   8 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   2 comments  ·  Delete…  ·  Admin →
   completed  ·  SimpleMDM responded

   Find under Profiles > Recovery Lock Password

5. Display Architecture of App in Shared Catalog

   Many apps now offer separate Intel, Apple Silicon & Universal Binary builds. Knowing which version is available in the shared app catalog will be very useful during the architecture transition.

   8 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   0 comments  ·  Delete…  ·  Admin →
   completed  ·  Anonymous responded

   Architecture for Shared Apps and custom apps that have architecture specified are now indicated within the admin interface with one of the following tags: Intel, Universal, or Apple Silicon.

6. Add Scripts and Script Jobs to API

   Feature Request: Add Scripts and Script Jobs to API

   Currently the "Scripts" and "Script Jobs" functionality is only supported when using the SimpleMDM web console via a browser.

   • Scripts: https://a.simplemdm.com/admin/scripts
   • Script Jobs: https://a.simplemdm.com/admin/script_jobs

   With the goal to support custom advanced automation for our machine provisioning processes and integration with other configuration management systems, we need the ability to:

   Requirements:

   • Create/Update (Upload) and Delete Scripts
     • Support multipart/form-data by default (similar to other SimpleMDM APIs)
   • List and Get Scripts, including:
     • Script ID
     • Script name
     • Full script contents
     • Created/Updated timestamps
   • Create Script Jobs
   • List Script Jobs
   • Get Job Status
   • Get Job Log / Results / Output

   Desirable bells & whistles premium options:

   • Query / Filter Script Jobs via Script Jobs List API. Available Filters might include:
     • Script Name
     • Script ID
     • Target ID(s) (Device ID(s), Device Group ID(s), Assignment Group ID(s))
     • Target Type(s) (Devices, Device Groups, Assignment Groups)
     • Created Timestamp
     • Updated/Modified Timestamp
     • Script Status (Pending, Completed, Failed)
   • Support Base64 encoding for Script Content when Creating/Updating scripts
   • API endpoint to get "raw" (application/octet-stream? Base64 encoded text/plain?) output of the script stdout/stderr Something like: GET https://a.simplemdm.com/api/v1/job/response/{job_id}
     • Currently the web console embeds the Script output as a JSON-escaped field in the "Metadata.job_response" field

   Why we need this functionality:

   We use SimpleMDM in addition to SaltProject for fleet management. Most of our fleet configuration is driven by Salt, however having the ability to use the native macOS MDM for management and automation will greatly benefit our ability to serve our users. The combination of Scripts (with Attribute Support!) and Jobs could be a game changer --if-- we could programatically interact with it. Some scenarios where this is valuable:

   • Initial Device Provisioning: When a new Device is enrolled in SimpleMDM, we want to take additional actions via the "device_enrolled" webhook event with a Script Job to do just-in-time provisioning.
   • Device Status Change Events: We already pull all SimpleMDM logs via API. We want to take advantage of

   Example scenarios:

   1. Upload A Bash Shell Script

   Request (POST)
   curl https://a.simplemdm.com/api/v1/scripts/ \
   -F "[email protected];filename=myscript.sh" \
   -F attributesupport=true \
   -u {APIKEY}:

   2.1. Execute myscript.sh against a single device

   Request (POST):
   curl https://a.simplemdm.com/api/v1/jobs/ \
   -d scriptname=myscript.sh \
   -d target={deviceid} \
   -d target_type=device

   Response:
   HTTP/1.1 200
   {
   "data": {
   "type": "job",
   "id": "abcde123456",
   "attributes": {
   "scriptname": "myscript.sh",
   "created": "2022-03-03T01:23:45Z",
   "createdby": "[email protected]",
   "target_type": "device",
   "target": "device-id-xxxx1234",
   "status": {
   "pending": 1,
   "completed": 0,
   "failed": 0
   },
   "devices": [
   {
   "id": "device-id-xxxx1234",
   "status": "pending"
   }
   ]
   }
   }
   }

   2.2. Execute myscript.sh against a device group

   Request (POST)
   curl https://a.simplemdm.com/api/v1/jobs/ \
   -d scriptname=myscript.sh \
   -d target={devicegroupid} \
   -d targettype=device_group

   1. Get Job Status:

   Request:
   curl https://a.simplemdm.com/api/v1/job/{JOB_ID} \
   -u {API_KEY}

   Response:
   HTTP/1.1 200
   {
   "data": {
   "type": "job",
   "id": "abcde123456",
   "attributes": {
   "scriptname": "myscript.sh",
   "created": "2022-03-03T01:23:45Z",
   "createdby": "[email protected]",
   "targettype": "device",
   "target": "device-id-xxxx1234",
   "status: {
   "pending": 0,
   "completed": 1,
   "failed": 0
   },
   "devices": [
   {
   "id": "device-id-xxxx1234",
   "status": "completed",
   "logid": "wxyz0987"
   }
   ]
   }
   }
   }

   1. Get Job Output

   Request:

   curl https://a.simplemdm.com/api/v1/job/log/{LOG_ID} \
   -u {API_KEY}

   Response:

   {
   "data": {
   "type": "log",
   "id": "ec481e3a74a44f588f95bab03f9b76e5",
   // ... standard job attributes?
   "metadata": {
   "name": "myscript.sh",
   "job_status": "0",
   "stdout": "<<Base64 Encoded stdout>>",
   "stderr": "<<Base64 Encoded stderr>>"
   }
   }
   }

   Feature Request: Add Scripts and Script Jobs to API

   Currently the "Scripts" and "Script Jobs" functionality is only supported when using the SimpleMDM web console via a browser.

   • Scripts: https://a.simplemdm.com/admin/scripts
   • Script Jobs: https://a.simplemdm.com/admin/script_jobs

   With the goal to support custom advanced automation for our machine provisioning processes and integration with other configuration management systems, we need the ability to:

   Requirements:

   • Create/Update (Upload) and Delete Scripts
     • Support multipart/form-data by default (similar to other SimpleMDM APIs)
   • List and Get Scripts, including:
     • Script ID
     • Script name
     • Full script contents
     • Created/Updated timestamps
   • Create Script Jobs
   • List Script Jobs
   • Get Job Status
   • Get Job Log /… more
   8 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   0 comments  ·  Delete…  ·  Admin →
   completed  ·  Anonymous responded

   This has been implemented. Please see our documentation for more information:

   • Scripts API: https://simplemdm.com/docs/api/#scripts
   • Script Jobs API: https://simplemdm.com/docs/api/#script-jobs

   
   

   If there are additions/changes you would like to see, please submit a new suggestion. Also, thank you for the very detailed description!

7. Manage Non-Custom Profiles via API

   Currently the API has a customconfigurationprofiles endpoint (https://simplemdm.com/docs/api/#custom-configuration-profiles) which can be used to create, modify, and assign/unassign custom profiles. However, there is on way to manage other profile types via the API.

   Say I create a FileVault profile in the web app and then want to assign the profile only to specific Macs using the API. There's not a specific group or device I want to manually assign. Instead I only want to assign to specific endpoints programmatically using a config management tool like Chef or Ansible. Since the profile is not "custom" I am unable to.

   I am asking regular, non-custom profiles have these actions added to the API.

   • Assign to device
   • Unassign from device
   • Assign device group
   • Unassign from device group

   Just like is currently possible for custom profiles - https://simplemdm.com/docs/api/#assign-to-device I understand there's complexity with creating these profiles through the API and thus this request does not cover that scope. Thank you!

   Currently the API has a customconfigurationprofiles endpoint (https://simplemdm.com/docs/api/#custom-configuration-profiles) which can be used to create, modify, and assign/unassign custom profiles. However, there is on way to manage other profile types via the API.

   Say I create a FileVault profile in the web app and then want to assign the profile only to specific Macs using the API. There's not a specific group or device I want to manually assign. Instead I only want to assign to specific endpoints programmatically using a config management tool like Chef or Ansible. Since the profile is not "custom" I am unable… more

   8 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   0 comments  ·  Delete…  ·  Admin →
   completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

   This has been added! Documentation is available here: https://api.simplemdm.com/#profiles

8. Dynamic Attribute Groups

   Create dynamic group (Application and/or Device groups) scheme based on device attribute (model, apps installed, OS version, Public IP, last reboot or custom script result) See screenshot for attributes examples.

   •  

   8 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   4 comments  ·  Delete…  ·  Admin →
   completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

   Dynamic Groups are now available in the new Groups interface (currently in Preview). Sign up here to have the preview enabled on your account.

9. Support more API profile query strings

   To get information about a custom profile through the API the only option is to list them all and then filter out the required data.

   https://api.simplemdm.com/#custom-configuration-profiles

   On a SimpleMDM instance with 100+ profiles, requesting a single page of profiles takes a very long time.

   curl https://a.simplemdm.com/api/v1/custom_configuration_profiles?limit=100 \
     -u ${API_KEY}:
   

   Running the above command takes around 20-30 seconds. However, if there were URL parameters available to map to profile attributes - ID, name, identifier, etc. - the API could return only the one or subset of profiles requested, in turn improving performance. It shouldn't take 30 seconds to return data about a single profile.

   I'm asking for a few things here...
   1. Add parameters in order to refine the profiles query. For example, https://a.simplemdm.com/api/v1/custom_configuration_profiles?limit=100&attributes.name=my.amazing.profile&id=4814&attributes.bundle_identifier=com.simplemdm.is.cool Any attribute returned by the API should be queryable. Having wildcard/like, greater than, less than, etc. operators a bonus as well, but not required.
   2. Support the above for both custom and regular profiles.
   3. (Optional) Optimize API performance for profiles lookup in general. Maybe there's a better way to query the database?

   To get information about a custom profile through the API the only option is to list them all and then filter out the required data.

   https://api.simplemdm.com/#custom-configuration-profiles

   On a SimpleMDM instance with 100+ profiles, requesting a single page of profiles takes a very long time.

   curl https://a.simplemdm.com/api/v1/custom_configuration_profiles?limit=100 \
     -u ${API_KEY}:
   

   Running the above command takes around 20-30 seconds. However, if there were URL parameters available to map to profile attributes - ID, name, identifier, etc. - the API could return only the one or subset of profiles requested, in turn improving performance. It shouldn't take 30 seconds to return data about… more

   8 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   0 comments  ·  Delete…  ·  Admin →
   completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

   Marking this as completed to give voters their votes back but we will continue working on optimizations. Please feel free to submit new suggestions if there is something more specific you'd like to see.

10. Report on Rapid Security Response versions

    Apple is adding a new update type to macOS called Rapid Security Responses. These updates change the build version, but not the OS version reported. Instead, the new ProductVersionExtra (sw_vers) and SupplementalOSVersionExtra (MDM query) keys are returned to denote a specific supplemental version only when a RSR is installed. If no RSR is installed the key is not present. Similarly, when using MDM query (simulated with /usr/libexec/mdmclient QueryDeviceInformation) BuildVersion is unchanged, but SupplementalBuildVersion has the correct RSR build.

    $ sw_vers
    ProductName: macOS
    ProductVersion: 13.3
    ProductVersionExtra: (a)
    BuildVersion: 22E7752300f
    

    $ /usr/libexec/mdmclient QueryDeviceInformation
    {
      BuildVersion = 22E5230e;
      OSVersion = "13.3";
      SupplementalBuildVersion = 22E7752300f;
      SupplementalOSVersionExtra = "(a)";
    };
    

    https://support.apple.com/guide/deployment/rapid-security-responses-dep93ff7ea78/web

    Please update SimpleMDM to report on installed RSR version and build when present.

    Apple is adding a new update type to macOS called Rapid Security Responses. These updates change the build version, but not the OS version reported. Instead, the new ProductVersionExtra (sw_vers) and SupplementalOSVersionExtra (MDM query) keys are returned to denote a specific supplemental version only when a RSR is installed. If no RSR is installed the key is not present. Similarly, when using MDM query (simulated with /usr/libexec/mdmclient QueryDeviceInformation) BuildVersion is unchanged, but SupplementalBuildVersion has the correct RSR build.

    $ sw_vers
    ProductName: macOS
    ProductVersion: 13.3
    ProductVersionExtra: (a)
    BuildVersion: 22E7752300f
    

    $ /usr/libexec/mdmclient QueryDeviceInformation
    {
      BuildVersion = 22E5230e;
      OSVersion = "13.3";

    … more
    8 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Delete…  ·  Admin →

11. Enable push notification messages
    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    3 comments  ·  Delete…  ·  Admin →
    completed  ·  SimpleMDM responded

    We now support push notifications to devices!

    To support push messaging, sign in to DeviceLink and deploy the DeviceLink mobile app to your devices. You can also configure your groups to automatically deploy the app on device enrollment (on by default).

    Let us know what you think!

12. Root CA Certificate Support

    Support for Certificates payload. Since we use some internal root CAs, we would like to be able to push those root certs to the device so that our SSL sessions are validated when mobile devices content to https signed with certs issued from that root. This will allow us to continue to use the "disallow untrusted TLS connections".

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  2 comments  ·  Delete…  ·  Admin →

13. Include build numbers when you display version numbers

    Display the build number for apps that are installed and in the catalogue details.

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Delete…  ·  Admin →
    completed  ·  SimpleMDM responded

    For enterprise apps, the version number displayed is actually the build number of the binary, as referenced under “CFBundleVersion” in the binary plist file.

14. Allow multiple ipa files to be uploaded in one go, with a progress bar/monitor

    This will help speed up the process as you can put all your ipa files in to upload, then carry on with your day. Rather than checking back for when it completes to do the next one.

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Delete…  ·  Admin →

15. Exchange - Allow option to change number of Sync days

    Allow the ability to set the number of days to sync with Exchange.

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  1 comment  ·  Delete…  ·  Admin →

16. Device Details Report

    Provide for some reporting. It doesn't have to be much but the ability to print all device detail in a single report would do the trick.

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    2 comments  ·  Delete…  ·  Admin →
    completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

    Closing this request since this is available with the Export Devices CSV. If there is something additional you'd like to see implemented, please submit a new suggestion outlining the problem or functionality.

17. Admin Hierarchy

    There should be a hierarchy of admin privileges.

    I would suggest adding "Owner" and "Admin" as the account owner should not be able to have an admin revoke their access. There should also be the option to transfer the ownership of the account much like you can with Slack teams.

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Delete…  ·  Admin →

18. Support iOS 10.3 Restart Device Command

    In iOS 10.3, Apple has added support for remotely rebooting a device through an MDM command.

    This would be a great option for unattended use cases to clear errors remotely. We've had a number of requests for this type of functionality in the past and I'd love to see it supported in SimpleMDM.

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  2 comments  ·  Delete…  ·  Admin →

19. Support Adding .pkg and .dmg without signing

    One of the nice things about Meraki’s SM is the way in which it handles the install of Apps vs SimpleMDM namely:
    - You dont need to sign a .pkg
    - You can upload a file or specify a URL as the source of the installer (.pkg or .dmg)

    Having to sign the .pkg is kinda annoying.

    Merkai docs: https://documentation.meraki.com/SM/Apps_and_Software/Installing_Software_on_Windows_and_Mac_Devices

    •  

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    3 comments  ·  Delete…  ·  Admin →
    completed  ·  SimpleMDM responded

    Deploying unsigned binaries to macOS is now supported with our Munki integration. Please see https://simplemdm.com/announcing-hosted-munki/

20. Create Report For Installed Applications

    Report on all installed applications across all devices. If users are in a group that allows applications to be installed, include the installed/detected applications on this report.

    So, per application, number of installations, or a detail report per application that shows where it is installed (on which devices).

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Delete…  ·  Admin →
    completed  ·  Anonymous responded

    We have just added an endpoint to the API that allows you to return a list of devices with a specific app installed and the versions installed on each device. This can be called on a per-app basis for apps that exist in your account's Catalog. Here is a link to the API documentation: https://simplemdm.com/docs/api/#list-installs

    
    

    This API allows you to retrieve similar information to what you would find under the "Installs" tab when clicking into an app on the Catalog page.

    
    

    I will close this suggestion for now, but if you feel that the "Installs" tab under Catalog > [app_name] and API are not sufficient for your needs, please do not hesitate to submit a new suggestion.