Mass-deploying with preconfigured settings for iOS

Last Updated:

System administrators can use a mobile device Management (MDM) to remotely configure the Zoom mobile app on managed iOS devices. This allows admins to require use of certain settings or disable them entirely.

The mobile app can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal. 

This article covers:

Learn to install Zoom with preconfigured settings for Windows devices, macOS devices, and Android devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.

Prerequisites for using MDM to configure Zoom on iOS

  • iOS device with iOS 4 or later
  • Enterprise mobility management (EMM) software such as AirWatch or Microsoft Intune

Configuration options

Configuration key Description Value type
Install and update
SetEnrollToken4CloudMDM Enroll your device into Zoom Device Management with a token provided from the web portal. String
Section text 1
DisableCertPin Disable Certificate Pinning. Boolean
BandwidthLimitUp Set maximum sending bandwidth for the desktop client. 
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.
String
BandwidthLimitDown Set maximum receiving bandwidth for the desktop client.
Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client.
String
EnableIndependentDataPort If enabled, the client will use the following ports for media transmission:
Audio: 8803
Screen share: 8802
Video: 8801
Boolean
Authentication
DisableFacebookLogin Remove Facebook login option. Boolean
DisableGoogleLogin Remove Google login option. Boolean
mandatory:EnableAppleLogin Allow access to Apple login option.  Boolean
DisableLoginWithSSO Remove SSO login option. Boolean
DisableLoginWithEmail Remove Email login option. Boolean
ForceLoginWithSSO Defaults login to SSO. Boolean
SetSSOURL Set the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli".
String
ForceSSOURL Set and lock the default SSO URL for SSO login.
For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli".
String
EnableEmbedBrowserForSSO Use embedded browser in the client for SSO. Boolean
DisableAutoLaunchSSO Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. Boolean
mandatory:EnablePhoneLogin Enables login with phone authentication. (A) Boolean
mandatory:EnableAliPayLogin Enables login with Alipay authentication. (A) Boolean
mandatory:EnableWeChatLogin Enables login with WeChat authentication. (A)
Boolean
EnforceLoginWithMicrosoft Require login with Microsoft authentication.  
SetAccountIDsRestrictedToJoin Restrict the client to only join meetings hosted by the specified account IDs. (B)  String
SetEmailDomainsRestrictedToLogin Set the email address domain that users can login with, each separated by "&". 
Example: zoom.us & hooli.com
String
EnableCloudSwitch Enable the option to switch between Zoom commercial (default) and Zoom for Gov. Boolean
EnforceSignInToJoin Require users to be authenticated before joining a meeting with the desktop client.  Authentication can take place through the the web portal, if joining through join URL. Boolean
EnforceAppSignInToJoin Require authentication on the desktop client to join any meeting on the desktop client. Boolean
EnforceSignInToJoinForWebinar Require users to be authenticated before joining a webinar with the desktop client.  Authentication can take place through the the web portal, if joining through join URL. Boolean
EnforceAppSignInToJoinForWebinar Require the client to be signed-in to a Zoom account before joiningRequire authentication on the desktop client to join any webinar on the desktop client.any webinar. Boolean
SetDevicePolicyToken Require internal meeting authentication. (C) String
General meeting and client options
AlwaysShowMeetingControls Set use of Always show meeting controls setting. Boolean
DisableClosedCaptioning Disable the use of all closed captioning. Boolean
DisableQnA Disable the use of Q&A in webinars.  Boolean
DisableMeetingReactions Disable the use of Meeting reactions Boolean
DisableNonVerbalFeedback Disable the use of Non-verbal feedback Boolean
DisableWebinarReactions Disable the use of Webinar Reactions. Boolean

DisableBroadcastBOMessage

Disable the ability for the host to broadcast a message to all open breakout rooms. Boolean
MeetingReminder Display reminder notifications for upcoming meetings. Boolean
Video
DisableReceiveVideo Disable receiving video. Boolean
DisableVideoCamera Disable sending video. Boolean
TurnOffVideoCameraOnJoin Automatically turn off camera when joining a meeting. Boolean
EnableFaceBeauty Enable Touch up my appearance. Boolean
SetFaceBeautyValue
Used in conjunction with EnableFaceBeauty, this allows you to set the exact intensity of the Touch up my appearance filter.  String
Audio
DisableComputerAudio Disable and remove the Computer Audio from the meeting audio options. Boolean
AutoJoinVOIP Automatically connect audio with computer audio when joining a meeting. Boolean
Screen sharing
DisableShareScreen Disable the ability to share your screen in meetings and webinars.
Note: This does not disable incoming screen sharing from other participants. 
Boolean
EnableBlurSnapshot Blur the view of other apps when switching between apps during screen share. Boolean
DisableWhiteBoard Disable Classic Whiteboard feature. Boolean
DisableInMeetingWhiteBoard Disable the Zoom Whiteboard feature in meetings and webinars. Boolean
DisableDesktopShare Disable the option to share your desktop when screen sharing. Boolean
In-meeting Chat
DisableMeetingChat Disable in-meeting chat. Boolean
Zoom Apps
DisableZoomApps Hide the Zoom Apps button. Boolean
Background and Filters
DisableVirtualBkgnd Disable Virtual Background feature. Boolean
DisableVideoFilters Disable Video filters feature. Boolean
EnableAutoReverseVirtualBkgnd Require post-meeting virtual background auto-reversal. Boolean
Recording
DisableCloudRecording Disable recording to the cloud. Boolean
Zoom Room and Room System calling
DisableDirectShare Disable direct share with Zoom Rooms option. Boolean
NeedCallARoom Display the Call Room System button on the home screen of the desktop client. Boolean
Zoom Chat
DisableLinkPreviewInChat Disable link previews. Boolean
SetMessengerDoNotDropThread Move messages with new replies to the bottom of the chat/channel. Boolean
PlaySoundForIMMessage Play audio notifications when an IM message is received. Boolean
MuteIMNotificationWhenInMeeting Mute chat system notifications when in a meeting. Boolean
Miscellaneous
EmbedDeviceTag Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests. String
Intercloud Policies
OverrideEnforceSigninIntercloud Override the EnforceSignInToJoin policy and allows a user to join a Zoom meeting hosted on the ZfG Cloud, without the need to authenticate. Boolean

Intercloud_DisableAllFeatures

Disables all features except for audio and video for meetings hosted on the ZfG cloud.  Boolean

Intercloud_DisableMeetingChat

Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud. Boolean

Intercloud_DisableShareScreen

Disables the local ability to share screen on meetings hosted on the ZfG Cloud.
This does not affect others' ability to shared content.
Boolean

Intercloud_DisableMeetingReactions

Disables the use of meeting reactions on meetings hosted on the ZfG Cloud. Boolean
Intercloud_DisableWhiteBoard Disables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud.  Boolean
Intercloud_DisableClosedCaptioning Disabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud.  Boolean

Intercloud_DisableMeetingPolls

Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud.  Boolean

Intercloud_DisableComputerAudio

Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud.  Boolean

Notes:

  • (A) These options are only available for devices in the China region.
  • (B) To acquire your account ID, have an account admin or owner submit a request to Zoom Support.
  • (C) To have this feature enabled, have an account admin or owner submit a request to Zoom Support. The owner will also need to edit a role to have view/edit access to Device Policy Management. The required token can then be retrieved from the Device Policy Management page
  • Use the prefix "mandatory:" followed by the key name if you want to make the configuration option mandatory for all users. Users won't be able to change the option when using Zoom on iOS.

Sample XML for Intune

<dict>
<key>ForceLoginWithSSO</key>
<integer>1</integer>
<key>SetSSOURL</key>
<string>success</string>
<key>MeetingReminder</key>
<integer>1</integer>
<key>mandatory:SyncMeetingFromCalendar</key>
<integer>0</integer>
<key>mandatory:TurnOffVideoCameraOnJoin</key>
<integer>0</integer>
</dict>

Sample XML for AirWatch

<managedAppConfiguration>
   <version>1.2.10</version>
    <bundleId>us.zoom.videomeetings</bundleId>
    <dict>
        <integer keyName="ForceLoginWithSSO">
           <defaultValue>
                <value>1</value>
          </defaultValue>
       </integer>
       <string keyName="SetSSOURL">
           <defaultValue>
               <value>success</value>
           </defaultValue>
       </string>
       <integer keyName="MeetingReminder">
           <defaultValue>
               <value>1</value>
           </defaultValue>
       </integer>
       <integer keyName="mandatory:SyncMeetingFromCalendar">
          <defaultValue>
                <value>0</value>
           </defaultValue>
       </integer>
       <integer keyName="mandatory:TurnOffVideoCameraOnJoin">
            <defaultValue>
                <value>0</value>
          </defaultValue>
      </integer>
    </dict>
</managedAppConfiguration>

How to configure with Intune

How to install Intune Company Portal on users' devices

  1. Install the Intune Company Portal app on your users' phones. 
  2. Instruct your users to sign in to the Company Portal app and follow the in-app instructions and allow the app to manage their devices.
  3. Instruct your users to install Zoom using the Intune Company Portal app.

How to apply a configuration policy

  1. Sign in to the Microsoft 365 Device Management dashboard.
  2. In the left-side navigation menu, click Client apps then App configuration policies.
  3. Click Add and enter the following information:
    • Name: Enter a display name for the configuration.
    • Description: Enter a description to help identify the configuration.
    • Device enrollment type: Select Managed devices.
    • Platform: Select iOS.
    • Associated app: Select ZOOM Cloud Meetings AppStore.
  4. Click Configuration settings.
  5. In the Configuration settings format drop-down menu, select Enter XML Data.
  6. Use the text box to set the configuration options
  7. Click OK.

How to assign configuration policy to a group

  1. Click Assignments in the left-side panel.
  2. Click Select groups to include.
  3. Search for a group you want to apply the policy to and click the group name to add them to the selected list.
  4. Click Select.
  5. Click Save to finish applying the policy to the selected groups. 
    It may take several minutes for the configuration to be pushed to all devices. 
     

Zoom Community

Join the 100K+ other members in the Zoom Community! Login with your Zoom account credentials and start collaborating.