A client wants to use their iOS enterprise account to distribute an app to their clients at event.
They don't want to publish the app to the AppStore, just have people go to a web page and get the app through the page.
I think it can be achieved with their enterprise account but is that in compliance with Apple's guidelines?
I could not find the answer to that.
Thanks!
It can be achieved, but it's not compliant with Apple's Enterprise Developer Account rules.
Even though you can do that (you just compile the app using the Enterprise certificate+provisioning profile), Apple's Enterprise Developer Account doesn't allow you to distribute the app for others that are not employees for the company. It's not an explicit information, but I have already talked to Apple through support and by phone and that's the official answer.
Related
Our requirement is to distribute iOS app for more than 1000+ users within the Organization.
My question : Can we make Distribution iPA using iOS Developer Provisioning Profile (As We have $99 Apple Account Not Enterprise Account) and share it with VPP and Apple MDM (Memory Device Management) or should i opt for Enterprise Apple account ?
**Note1 - Dont want to use Adhoc Provisioning Profile as it require all devices registered in apple account and we have 1000+ Apple Devices.
**Note2 - Already gone through other related post but dint find the steps to disbtribute the iOS using VPP , all post suggest to use Enterprise Distribution (Our requirement is to use VPP since Our business customer have already have VPP )
**Note3 - We have developed an iOS app , not want to share purchased app through VPP .
Kindly Suggest any reference which guides me to deploy App through VPP.
If the one organisation is both the developer and the consumer of the app, then an enterprise program membership is a possible approach. With an enterprise membership you can:
Develop apps
Sign those apps for private distribution
Distribute those apps, without going through the Apple approval process
Distribute those apps via a private app store/intranet/MDM system etc.
If you want to provide apps to one or more enterprise customers that are independent of the developer then an individual membership and B2B distribution is the correct approach. The steps are outlined here but in summary:
You develop your app as you normally would
You create an entry for that app in iTunes connect, specifying Available privately as a custom B2B app in the Pricing and availability section
You can also specify the price tier that applies to this app. You can select the free tier and arrange payment directly with the customer if you prefer.
Nominate an AppleID associated with the VPP customer you are going to supply to
Submit the app for Apple approval as per usual
2019 addendum
It is now possible for an organisation to provide B2B apps to themselves. The advantage of B2B apps is that they never expire and don't require periodic provisioning profile validation and refresh. The disadvantage is that there is still a review process, so if you are doing things that won't pass review you can have an issue. The review process also introduces some release delay.
When distributing apps using the Apple Developer Enterprise option, can a single iOS device have apps from two different Apple Developer Enterprise profiles?
We found this article stating it can not be done.
http://mobiledan.net/2012/03/02/5-options-for-distributing-ios-apps-to-a-limited-audience-legally/
I contacted Apple Developer support directly and they did not have an answer of yes or no, but they could not find any documentation about this scenario. They did state that MDM could be used to limit apps that can be installed. But there is no reason to believe you can't install apps from two different Enterprise developer profiles.
Does anyone have first hand info about this scenario? The article makes us question this.
Thank you
The enterprise account simply allows you to create a signed and trusted application. This takes the place of an application signed by Apple.
The only sticking point here is in the license agreement for an enterprise account. The devices eligible to run an enterprise app are very limited - essential only allowed on employee devices. So it would be rare to have a person that is employed by multiple companies with enterprise accounts.
The ipa for the app contains the provisioning profile registered with Apple to certify the app. There is nothing associated the device with that enterprise account such as the way an AdHoc device is registered with a particular account.
Here is a link to a similar answer as well
https://apple.stackexchange.com/questions/141662/different-enterprise-signed-apps-on-same-ios-device
I just try to understand the process of deploying enterprise apps.
My app is on a webserver which is accessable from the outside as well, which gives me the possibility to install the app at home. This seems like a security breach for Apple, I mean anyone could make a website which offers enterprise apps to any device. What is the limitation here ?
I couldn't find any information about this in the apple documentation, an official link would be great.
It is against the terms of use to distribute enterprise applications outside of your registered organization. If Apple finds out, your account will surely be terminated.
From THE FAQ
The iOS Developer Enterprise Program only allows you to distribute your apps to employees or members of your organization through Ad Hoc distribution.
There is no limitation
You shouldn't distribute the app to people who doesn't work in your enterprise, but apple can't control it. (to be clear, they can know if you are using the certificate, but they can't know if the people who installs the app work for you)
The only "limitation" is the fear to be discovered by apple because they will delete your account.
BTW, the security breach isn't for apple, it's for you, you should use a password in your webserver
From the Distributing Enterprise Apps Guide:
Requirements:
A secure web server that authenticated users can access
I am curious as to the process for distributing an iOS app for in-house use. As far as I'm aware you must have an enterprise license. Other questions indicate that Apple simply gives you a key to sign the apps and you can distribute the raw IPK files. Does the company have to register the devices with Apple? I'm sure Apple would not simply give people app signing ability as they can use this to circumvent the appstore
It is very simple to develop applications for in-house use.
If it's for a company (other than yours), they will have to buy an enterprise license and you will just have to compile your code/generate the application using this certificate. There is no need to register any device and the application does not need to pass through the Apple review process or through the Apple Store.
Recently Apple has released a new certificate (namely B2B) which offers you more possibilities to distribute with companies. May be this will help you.
Sorry for misreading the question earlier.
This manual is more related to what you would be doing: http://manuals.info.apple.com/en%5FUS/Enterprise%5FDeployment%5FGuide.pdf
I have developed an enterprise app and its ready to use for my client.
My company bought an account and provides me with the credentials. So i created the ad-hoc distribution profile to distribute the app to my client's testing team during development using testflight.
But as i read somewhere, the account type iOS developer program can not distribute the app to any one,
If you want to distribute your app, you need to enroll for iOS developer [enterprise] program account. But that was not in my case, I was able to distribute my app to the client using the iOS developer program account.
I know, if you want to submit your app to the app store, you need to have an iOS developer program and,
iOS Developer Enterprise Program only allows you to distribute your applications to employees or members of your organization through Ad Hoc distribution.
Now my doubt is,
Is it really mandatory to submit our app to the apple for review to
ensure that our app is free of explicit OR else we can use it without
review? Why do we need an approval from apple when we are not
submitting to app store.
The client is telling they just want to get approval then they can sell it within In-House or B2B use.
Because my client asked me to submit our app to apple for just review, but do not want to put on app store. Once they approved, then they will distribute by using ad-hoc distribution profile.
Thanks.
You dont need to submit an enterprise app to the app store for review.
Your client's request is weird. It doesn't make sense. You can tell your client that Apple does not review enterprise apps.
Update:
your doubt:
Is it really mandatory to submit our app to the apple for review to
ensure that our app is free of explicit OR else we can use it without
review?
Answer: NO. Its not mandatory
Why do we need an approval from apple when we are not
submitting to app store.
Answer: You dont need an approval.
Now, there is a case where your client's request will fail for sure:
Assuming (for the sake of explanation) this app is a porn video viewer app, it'd never be approved by the Apple App Store reviewer. And if the enterprise build deploy is contingent upon AppStore approval, even that wouldn't happen (since the client is adamant)
Note: Enterprise accounts are not meant to circumvent Apple's pay wall. i.e., you should not distribute the app outside your organization.
Hope this answers your question. (if it didn't feel free to add a more specific question to the original post.)
3rd Update:
FYI Enterprise Developer account are not easy to obtain. If Apple Developer Center thinks your client is shady, they may have to manage with the regular developer account. The question you are asking has no credible sources for answers because no one would insist on doing something like this.
Is it really mandatory to submit our app to the apple for review to ensure that our app is free of explicit OR else we can use it without review? Why do we need an approval from apple when we are not submitting to app store. The client is telling they just want to get approval then they can sell it within In-House or B2B use.
You do not need approval, once you are enrolled on the enterprise scheme you will not need to get approval from apple for any applications created as an enterprise application.
However if you then want to sell it on the normal app market it will need to be done from a totally separate account and will need approving.
The enterprise license is a way of making sure that rogue apps do not start making the rounds as they do not need to be installed via itunes, they can just be hosted on a website and downloaded directly from there to the device.
I assume your client may be worried that you aren't going to provide a stable, malware free application and would like apple to authorise & test it first, even though it is not going on to the app store so they have peace of mind that if it's good enough for apple its good enough for them. Or that the MD once heard that Apple HAS to authorise it and they are just jumping through hoops for them.
Companies that are enrolled in the iOS Developer Enterprise Program (currently $299 / year) do not need to submit apps to Apple for approval or distribution. These companies can host and wirelessly distribute their in-house apps without Apple acting as gatekeeper.
If you are an external contractor who has been hired to code an app, you may need to hand the app over for them to sign with their Enterprise key so that they can then distribute in-house.
It would be (very) unusual for an Enterprise Program member to submit their app to Apple for review because it is unnecessary. And so far as I know there is no option to do this without setting up all the app details in iTunes Connect and pretending you were going to sell the app.
Update 1:
#Praveen-K: What doubt is there? If you want to have Apple "test & approve" your Enterprise app (a really bad idea) then you will need to:
Create a fake Apple store app
Fill in fake info in iTunes Connect
Provide an on-sell date a long way onto the future
Provide all the login info and access to your servers that the real app requires
Assist the Apple app approvers in accessing your own data to get approval
Then, after approval, delete the app from iTunes Connect and the App Store
If this does not answer your question then perhaps you need to make sure your question is very clear.