iPad Limitations Without MDM
iPadOS runs every app in a sandbox, and no app signature or permission gives an app more control over the iPad. Control over the device itself comes from supervision and an MDM. On an iPad without an MDM (app-only mode, see Apple iPad Provisioning), the signageOS app has these limits.
Limits an MDM removes
| Area | App only | With MDM |
|---|---|---|
| Staying on the screen | Anyone can leave the app unless Guided Access is on, and Guided Access is started by hand on the iPad | Single App Mode keeps the app on the screen |
| Restart, power loss, crash | The app doesn't start by itself, and Guided Access ends. The device stays offline in Box until someone opens the app. | iPadOS opens the app again |
| App in the background | iPadOS pauses the app as soon as it leaves the screen: content stops and the device goes offline in Box | Can't happen under Single App Mode |
| Installation | By hand from the App Store, with an Apple Account on each iPad | Silent, no Apple Account |
| Verification | Verification code entered in Box for each iPad | Automatic, into the Organization in the app configuration |
| Serial number | Not reported: iPadOS doesn't give apps the serial number | Reported to Box through the managed app configuration |
| Device reboot | Not available | From your MDM |
| iPadOS updates | Not available from Box; installed on the iPad, which restarts it | Scheduled and enforced from your MDM |
| Time zone and time | Read only | Time zone set from your MDM |
| Wi-Fi | Joined on site, through the iPad's Settings or the on-site menu. iPadOS asks a person to tap Join, so remote Wi-Fi changes from Box are refused. | Wi-Fi profiles from your MDM, no tap needed |
| Device name | The app sees "iPad" instead of the name set on the iPad | Renamed from your MDM |
What your MDM can do on the iPads is listed in iPad Capabilities With MDM.
Limits on every iPad
These come from iPadOS and apply with an MDM too.
- App updates come from the App Store, or from your MDM, which installs App Store updates. Box can't install app versions.
- Screenshots don't show video. iPadOS draws video on a separate layer that apps can't capture, so video areas are black in screenshots.
- Display off is simulated. Turning the display off shows a black screen at the lowest brightness. Turning the screen off for real would lock the iPad and pause the app.
- Permission prompts need a tap on the iPad. Location access (used only to show the Wi-Fi network name) and camera access (used only when an applet scans a barcode) are asked once on the iPad. An MDM can't grant them in advance.
- The MAC address isn't available to apps. Box shows no MAC address for iPads. Your MDM's inventory shows it.
- Network settings are read only. Box shows the network interfaces with their IP address, netmask and Wi-Fi network name, but can't set a static IP address, scan for Wi-Fi networks or turn interfaces off.
- The proxy applies to the signageOS app only, not to the rest of the iPad. Use an MDM proxy profile for the whole iPad.
- Streams: HLS and HTTP streams play. RTP, RTSP and UDP streams aren't supported.
- Not available on iPad: temperature monitoring, packages, scripts, VPN, peer-to-peer recovery, video inputs, serial ports, LED strips and sensors.