What limitations does over the air distribution of enterprise apps have? - ios

I just try to understand the process of deploying enterprise apps.
My app is on a webserver which is accessable from the outside as well, which gives me the possibility to install the app at home. This seems like a security breach for Apple, I mean anyone could make a website which offers enterprise apps to any device. What is the limitation here ?
I couldn't find any information about this in the apple documentation, an official link would be great.

It is against the terms of use to distribute enterprise applications outside of your registered organization. If Apple finds out, your account will surely be terminated.
From THE FAQ
The iOS Developer Enterprise Program only allows you to distribute your apps to employees or members of your organization through Ad Hoc distribution.

There is no limitation
You shouldn't distribute the app to people who doesn't work in your enterprise, but apple can't control it. (to be clear, they can know if you are using the certificate, but they can't know if the people who installs the app work for you)
The only "limitation" is the fear to be discovered by apple because they will delete your account.
BTW, the security breach isn't for apple, it's for you, you should use a password in your webserver
From the Distributing Enterprise Apps Guide:
Requirements:
A secure web server that authenticated users can access

Related

What are the requirements for distributing an internal iOS app via the Enterprise Program?

I'm in charge of developing an application for my company. It'll only be used by my company. I found the Enterprise Program.
I read
iOS Developer Enterprise Program
but I also read something about MDM iOS that I need to implement.
Is MDM needed to distribute my app? Also, how will my coworkers be able to download the app? How does Apple know they are authorized, and not some random guy who found the link on Google?
You don’t need to do MDM for the enterprise program as far as I know. As for preventing people from downloading the app, I think you just have to keep the link private, or put it behind a URL that can only be accessed on your company network or VPN. And of course, require login, so someone can’t access your internal information just by downloading the app! Presumably, Apple will revoke your enterprise privileges if they find you are abusing them.
Source: I worked at a company that used enterprise distribution for internal beta distribution, among other things.
One of my clients has 30 iPads that are used with an in-house developed app. The "Ad Hoc" distribution model is easy to implement if the number of deployed devices is less than 100. This approach is sometimes described as a "Beta test" approach, but that's just one common use for it.
See these pages:
https://developer.apple.com/library/ios/documentation/IDEs/Conceptual/AppDistributionGuide/TestingYouriOSApp/TestingYouriOSApp.html
Ad-hoc Deployment

best way to deploy iPhone app to the end user without submitting to the app store

I have made an app for doctors only for education purpose only. because of copyright issues I don't want the app to be on the app store. So I am planning to host the app on the my website with authentication. I have distributed app this way to the clients before and I know the difference between apple enterprise program vs developer account. I came across the issue that you can not deploy app to your end user via this method because it is violating app store terms and condition. After reading many forums I came to know that b2b program can be the solution. I know that b2b app store you still have to go with app store standard procedure So my questions are,
1) If your app is free, will it still violate app store terms and condition.?
2) What is the flow for b2b program once you submit your app to apple.?
3) Is b2b also violating the terms and condition for my scenario.?
Note - I know already how to get enterprise account or apply for b2b program. I have an organization to deal with this. I also know that the enterprise program only allows you to distribute the application file among employees with registered devices in your company, not to anybody else. :)
Thanks.
1) Free apps are still held to the same approval standards of paid apps.
The best way is an iOS enterprise account. Once you have an enterprise account, you can host signed Apps on your own website and your clients can download them directly to devices using OTA distribution. There is no Apple review for distributing apps this way.
Note that enterprise accounts are meant for distributing apps in an organization and not publicly. I think as long as you limit distribution to a specific group (not publicly) then you will not violate license agreements. Read the actual agreement to make sure it fits your needs.
Check out this question for details of how to setup OTA distribution:
IOS Enterprise Distribution Through OTA

iOS enterprise account for distribution

A client wants to use their iOS enterprise account to distribute an app to their clients at event.
They don't want to publish the app to the AppStore, just have people go to a web page and get the app through the page.
I think it can be achieved with their enterprise account but is that in compliance with Apple's guidelines?
I could not find the answer to that.
Thanks!
It can be achieved, but it's not compliant with Apple's Enterprise Developer Account rules.
Even though you can do that (you just compile the app using the Enterprise certificate+provisioning profile), Apple's Enterprise Developer Account doesn't allow you to distribute the app for others that are not employees for the company. It's not an explicit information, but I have already talked to Apple through support and by phone and that's the official answer.

Distributing an enterprise (in-house) iOS app

I am curious as to the process for distributing an iOS app for in-house use. As far as I'm aware you must have an enterprise license. Other questions indicate that Apple simply gives you a key to sign the apps and you can distribute the raw IPK files. Does the company have to register the devices with Apple? I'm sure Apple would not simply give people app signing ability as they can use this to circumvent the appstore
It is very simple to develop applications for in-house use.
If it's for a company (other than yours), they will have to buy an enterprise license and you will just have to compile your code/generate the application using this certificate. There is no need to register any device and the application does not need to pass through the Apple review process or through the Apple Store.
Recently Apple has released a new certificate (namely B2B) which offers you more possibilities to distribute with companies. May be this will help you.
Sorry for misreading the question earlier.
This manual is more related to what you would be doing: http://manuals.info.apple.com/en%5FUS/Enterprise%5FDeployment%5FGuide.pdf

Deploy iPad App - Enterprise or Developer Licence

I'm sorry if this question has been asked. I have looked but can not find the question/answer.
I work for a web agency and am now developing IOS Apps for deployment on iPads.
We have the Developer licence from Apple however, reading the blurb it suggests that the Apps need to go through the App Store.
Due to the nature of the Apps (Medical) they can not be on the App Store.
Is this Developer licence using the "Ad Hoc" option enough to deploy the App to clients (not in our company) using a link, or do I need to use the Enterprise Licence?
The Enterprise Licence does say:
You plan to only distribute your iOS apps within your company or organization
The Enterprise Program is intended for developers who wish to develop
and distribute their iOS apps within their company or organisation.
Any advice would be greatly appreciated. I'm sorry this is a bit of a random/bitty question.
Thanks in advance.
The ad-hoc distribution is limited to 99 devices and the enterprise limitation is 2k or 5k, not sure. If you want to really distribute your app, but limit its usage, then you have to build an authorization mechanism into your app (like http://www.doccheck.com for doctors). You may use an existing service like this or you can implement your own.
Enterprise distribution, btw, requires the registration of the device in your company. I would not do that as a customer in that case, maybe that is an issue in your case, too.

Resources