Mass-deploying with preconfigured settings for iOS
Last Updated:
System administrators can use a mobile device Management (MDM) to remotely configure the Zoom mobile app on managed iOS devices. This allows admins to require use of certain settings or disable them entirely.
The mobile app can be enrolled in and managed through Zoom Device Management, which allows you to centrally control desktop client and mobile app settings in the Zoom web portal.
This article covers:
Learn to install Zoom with preconfigured settings for Windows devices, macOS devices, and Android devices. You can also use Zoom’s own Device Management platform to centrally configure desktop client and mobile app settings.
Prerequisites for using MDM to configure Zoom on iOS
- iOS device with iOS 4 or later
- Enterprise mobility management (EMM) software such as AirWatch or Microsoft Intune
Note: While not required, not deploying an associated App Protection Policy will result in users being prompted to sign in to the Intune account upon every launch of the Zoom app. Upon first launch users will need to sign in with their Microsoft credentials, but including the App Protection Policy avoids any further Intune authentication prompts.
Configuration options
Configuration key | Description | Value type |
---|---|---|
Install and update | ||
SetEnrollToken4CloudMDM | Enroll your device into Zoom Device Management with a token provided from the web portal. | String |
Network | ||
DisableCertPin | Disable Certificate Pinning. | Boolean |
BandwidthLimitUp | Set maximum sending bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
String |
BandwidthLimitDown | Set maximum receiving bandwidth for the desktop client. Note: If bandwidth is restricted through web settings, the web restrictions override restrictions set in the client. |
String |
EnableIndependentDataPort | If enabled, the client will use the following ports for media transmission: Audio: 8803 Screen share: 8802 Video: 8801 |
Boolean |
Authentication | ||
DisableFacebookLogin | Remove Facebook login option. | Boolean |
DisableGoogleLogin | Remove Google login option. | Boolean |
mandatory:EnableAppleLogin | Allow access to Apple login option. | Boolean |
DisableLoginWithSSO | Remove SSO login option. | Boolean |
DisableLoginWithEmail | Remove Email login option. | Boolean |
DisableUserSignUp |
Disable the Sign Up option on the Zoom app, which would otherwise be displayed with Join a Meeting and Sign In options upon opening the Zoom app. | Boolean |
ForceLoginWithSSO | Defaults login to SSO. | Boolean |
SetSSOURL | Set the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "SetSSOURL=hooli". |
String |
ForceSSOURL | Set and lock the default SSO URL for SSO login. For example, hooli.zoom.us would be set as "ForceSSOUrl=hooli". |
String |
EnableEmbedBrowserForSSO | Use embedded browser in the client for SSO. | Boolean |
DisableAutoLaunchSSO | Prevent Zoom from automatically launching the previously used SSO URL. This is useful for users with multiple accounts, each having their own SSO URL. | Boolean |
mandatory:EnablePhoneLogin | Enables login with phone authentication. (A) | Boolean |
mandatory:EnableAliPayLogin | Enables login with Alipay authentication. (A) | Boolean |
mandatory:EnableWeChatLogin | Enables login with WeChat authentication. (A) |
Boolean |
EnforceLoginWithMicrosoft | Require login with Microsoft authentication. | Boolean |
SetAccountIDsRestrictedToJoin | Restrict the client to only join meetings hosted by the specified account IDs. (B) | String |
SetEmailDomainsRestrictedToLogin | Set the email address domain that users can login with, each separated by "&". Example: zoom.us & hooli.com |
String |
EnableCloudSwitch | Enable the option to switch between Zoom commercial (default) and Zoom for Gov. | Boolean |
EnforceSignInToJoin | Require users to be authenticated before joining a meeting with the mobile app. Authentication can take place through the the web portal, if joining through join URL. Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. |
Boolean |
EnforceAppSignInToJoin | Require authentication on the mobile app to join any meeting on the mobile app. Note: This policy will interfere with joining meetings and webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. |
Boolean |
EnforceSignInToJoinForWebinar | Require users to be authenticated before joining a webinar with the mobile app. Authentication can take place through the the web portal, if joining through join URL. Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. |
Boolean |
EnforceAppSignInToJoinForWebinar |
Require authentication on the mobile app to join any webinar on the mobile app. Note: This policy will interfere with joining webinars hosted by Zoom for Government (ZfG) accounts, unless the OverrideEnforceSigninIntercloud policy is enabled as well. |
Boolean |
SetDevicePolicyToken | Require internal meeting authentication. (C) | String |
General meeting and client options | ||
AlwaysShowMeetingControls | Set use of Always show meeting controls setting. | Boolean |
DisableClosedCaptioning | Disable the use of all closed captioning. | Boolean |
DisableQnA | Disable the use of Q&A in webinars. | Boolean |
DisableMeetingReactions | Disable the use of Meeting reactions. | Boolean |
DisableNonVerbalFeedback | Disable the use of Non-verbal feedback. | Boolean |
DisableWebinarReactions | Disable the use of Webinar Reactions. | Boolean |
DisableSideCar |
Disable the use of Webinar Resources, which allows webinar hosts with the ability to link to external resources, such as newsletter sign-ups, learn more pages, and others. | Boolean |
DisableBroadcastBOMessage |
Disable the ability for the host to broadcast a message to all open breakout rooms. | Boolean |
MeetingReminder | Display reminder notifications for upcoming meetings. | Boolean |
Video | ||
DisableReceiveVideo | Disable receiving video. | Boolean |
DisableVideoCamera | Disable sending video. | Boolean |
TurnOffVideoCameraOnJoin | Automatically turn off camera when joining a meeting. | Boolean |
EnableFaceBeauty | Enable Touch up my appearance. | Boolean |
SetFaceBeautyValue |
Used in conjunction with EnableFaceBeauty, this allows you to set the exact intensity of the Touch up my appearance filter. | String |
AlwaysShowVideoPreviewDialog |
Always show the video preview when joining a meeting. | Boolean |
Audio | ||
DisableComputerAudio | Disable and remove the Computer Audio from the meeting audio options. | Boolean |
AutoJoinVOIP | Automatically connect audio with computer audio when joining a meeting. | Boolean |
Screen sharing | ||
DisableShareScreen | Disable the ability to share your screen in meetings and webinars. Note: This does not disable incoming screen sharing from other participants. |
Boolean |
EnableBlurSnapshot | Blur the view of other apps when switching between apps during screen share. | Boolean |
DisableWhiteBoard | Disable Classic Whiteboard feature. | Boolean |
DisableInMeetingWhiteBoard | Disable the Zoom Whiteboard feature in meetings and webinars. | Boolean |
DisableDesktopShare | Disable the option to share your desktop when screen sharing. | Boolean |
In-meeting Chat | ||
DisableMeetingChat | Disable in-meeting chat. | Boolean |
Zoom Apps | ||
DisableZoomApps | Hide the Zoom Apps button. | Boolean |
Background and Filters | ||
DisableVirtualBkgnd | Disable Virtual Background feature. | Boolean |
DisableVideoFilters | Disable Video filters feature. | Boolean |
EnableAutoReverseVirtualBkgnd | Require post-meeting virtual background auto-reversal. | Boolean |
Recording | ||
DisableCloudRecording | Disable recording to the cloud. | Boolean |
Zoom Room and Room System calling | ||
DisableDirectShare | Disable direct share with Zoom Rooms option. | Boolean |
NeedCallARoom | Display the Call Room System button on the home screen of the desktop client. | Boolean |
Zoom Chat | ||
DisableLinkPreviewInChat | Disable link previews. | Boolean |
SetMessengerDoNotDropThread | Move messages with new replies to the bottom of the chat/channel. | Boolean |
PlaySoundForIMMessage | Play audio notifications when an IM message is received. | Boolean |
MuteIMNotificationWhenInMeeting | Mute chat system notifications when in a meeting. | Boolean |
Miscellaneous | ||
EmbedDeviceTag | Embed a specified device tag string for all HTTP requests from Zoom client application. This string will be appended to the head of the regular HTTP requests. | String |
SyncMeetingFromCalendar | Controls the Sync Zoom Meetings From Calendars setting in the mobile app. | Boolean |
SyncMeetingToCalendar | Prevent users from syncing a newly scheduled meeting to their local calendars on their mobile device. | Boolean |
Intercloud Policies | ||
OverrideEnforceSigninIntercloud | Override the following policies to allow users to join a Zoom meeting or webinar hosted on the Zoom for Government Cloud (ZfG Cloud) without the need to authenticate:
|
Boolean |
Intercloud_DisableAllFeatures |
Disables all features except for audio and video for meetings hosted on the ZfG cloud. | Boolean |
Intercloud_DisableMeetingChat |
Disables the use of in-meeting chat on meetings hosted on the ZfG Cloud. | Boolean |
Intercloud_DisableShareScreen |
Disables the local ability to share screen on meetings hosted on the ZfG Cloud. This does not affect others' ability to shared content. |
Boolean |
Intercloud_DisableMeetingReactions |
Disables the use of meeting reactions on meetings hosted on the ZfG Cloud. | Boolean |
Intercloud_DisableWhiteBoard | Disables the use of in-meeting whiteboarding on meetings hosted on the ZfG Cloud. | Boolean |
Intercloud_DisableClosedCaptioning | Disabled by default, this option disables the use of captioning features on meetings hosted on the ZfG Cloud. | Boolean |
Intercloud_DisableMeetingPolls |
Disabled by default, this option disables the use of polling in meetings hosted on the ZfG Cloud. | Boolean |
Intercloud_DisableComputerAudio |
Disabled by default, this option disables the use of computer audio for connecting to meetings hosted on the ZfG Cloud. | Boolean |
Zoom Mesh | ||
EnableMeshNetworking | Control client use of Zoom Mesh, even if deployed on your account and local network. | Boolean |
MeshMulticastIP |
When utilizing Zoom Mesh, this policy allows admins to specify a valid IP address to be a UDP multicast IP for Zoom apps to declare themselves and detect each other in their local sub-network (255.255.255.0). By default, 224.0.0.1 is used, but admins can choose other IP addresses within the range of [224.0.0.1, 239.255.255.255]. |
String |
MeshMulticastPort |
When utilizing Zoom Mesh, this policy allows an admin to specify a valid port to be used as the UDP multicast port to communicate with other Zoom Mesh nodes on the network. The default port is 36699. |
String |
MeshListenPortRange |
When utilizing Zoom Mesh, this policy allows a valid port range to be used to set up listen sockets for connection requests between Mesh parents and children nodes. The nodes will also use this range to send signals and media data. The default port range is 18801-19800. |
String |
EnableGuestMesh |
When utilizing Zoom Mesh, this allows external users (not on your account) to join a Webinar through the local Zoom Mesh-enabled network. Other requirements must be met, such as the device having the minimum supported client version for Mesh connections and the associated account setting in the web portal also enabled. | Boolean |
Notes:
- (A) These options are only available for devices in the China region.
- (B) To acquire your account ID, have an account admin or owner submit a request to Zoom Support.
- (C) To have this feature enabled, have an account admin or owner submit a request to Zoom Support. The owner will also need to edit a role to have view/edit access to Device Policy Management. The required token can then be retrieved from the Device Policy Management page.
- Use the prefix "mandatory:" followed by the key name if you want to make the configuration option mandatory for all users. Users won't be able to change the option when using Zoom on iOS.
Sample XML for Intune
<dict>
<key>ForceLoginWithSSO</key>
<integer>1</integer>
<key>SetSSOURL</key>
<string>success</string>
<key>MeetingReminder</key>
<integer>1</integer>
<key>mandatory:SyncMeetingFromCalendar</key>
<integer>0</integer>
<key>mandatory:TurnOffVideoCameraOnJoin</key>
<integer>0</integer>
</dict>
Sample XML for AirWatch
<managedAppConfiguration>
<version>1.2.10</version>
<bundleId>us.zoom.videomeetings</bundleId>
<dict>
<integer keyName="ForceLoginWithSSO">
<defaultValue>
<value>1</value>
</defaultValue>
</integer>
<string keyName="SetSSOURL">
<defaultValue>
<value>success</value>
</defaultValue>
</string>
<integer keyName="MeetingReminder">
<defaultValue>
<value>1</value>
</defaultValue>
</integer>
<integer keyName="mandatory:SyncMeetingFromCalendar">
<defaultValue>
<value>0</value>
</defaultValue>
</integer>
<integer keyName="mandatory:TurnOffVideoCameraOnJoin">
<defaultValue>
<value>0</value>
</defaultValue>
</integer>
</dict>
</managedAppConfiguration>
How to configure with Intune
How to install Intune Company Portal on users' devices
- Install the Intune Company Portal app on your users' phones.
- Instruct your users to sign in to the Company Portal app and follow the in-app instructions and allow the app to manage their devices.
- Instruct your users to install Zoom using the Intune Company Portal app.
How to apply a configuration policy
- Sign in to the Microsoft 365 Device Management dashboard.
- In the left-side navigation menu, click Client apps then App configuration policies.
- Click Add and enter the following information:
- Name: Enter a display name for the configuration.
- Description: Enter a description to help identify the configuration.
- Device enrollment type: Select Managed devices.
- Platform: Select iOS.
- Associated app: Select ZOOM Cloud Meetings AppStore.
- Click Configuration settings.
- In the Configuration settings format drop-down menu, select Enter XML Data.
- Use the text box to set the configuration options.
- Click OK.
Note: While not required, not deploying an associated App Protection Policy will result in users being prompted to sign in to the Intune account upon every launch of the Zoom app. Upon first launch users will need to sign in with their Microsoft credentials, but including the App Protection Policy avoids any further Intune authentication prompts.
How to assign configuration policy to a group
- Click Assignments in the left-side panel.
- Click Select groups to include.
- Search for a group you want to apply the policy to and click the group name to add them to the selected list.
- Click Select.
- Click Save to finish applying the policy to the selected groups.
It may take several minutes for the configuration to be pushed to all devices.
Zoom Community
Join the 250K+ other members in the Zoom Community! Login with your Zoom account credentials and start collaborating.