Managing the Zoom client with BlackBerry UEM in Zoom App

IT administrators for organizations who use the Zoom for BlackBerry application are able to manage and deploy security policies to control iPads, iPhones, and Android devices within their organization.

The following requirements must be met before managing the Zoom client with BlackBerry UEM

  • Management console for BlackBerry Unified Endpoints

A simple step-by-step guide for adding Zoom to UEM

  1. Sign in to the Blackberry Marketplace.
  2. You will find Zoom for BlackBerry under the Applications category.
  3. The application can be accessed by clicking on it.
  4. You then need to click on Start Trial when you get to the application page.

What are the steps involved with configuring Zoom for BlackBerry for deployment?

  1. You will need to log in to your BlackBerry UEM server.
  2. Click Apps.
  3. In the dropdown, click Apps.
  4. In the apps list, click Zoom for BlackBerry.
  5. Click Settings.
  6. Click BlackBerry Dynamics.
  7. Clicking the plus icon under App Configuration will allow you to add a new deployment configuration.
  8. Click on the New button and type the configuration’s name in the Name field.
  9. Then, configure the settings for the deployment of the application.
  10. Click Save.

BlackBerry UEM allows you to configure a variety of settings

In general

The Data Leakage Prevention section in the General tab allows administrators to set policies that govern how certain features can be disabled in accordance with the organization’s privacy and security policies.

There are a number of settings that can be changed:

Setting Policy Default
Deny user access to Camera — This option disables the Zoom client’s ability to access the device’s camera. Disabled
Deny user access to Photo Gallery – This disables the device’s built-in photo gallery apps, as well as the ability to access and share photos. Disabled
Disable “Send to Zoom Buddies” on Android and share to “Zoom” on iOS Android- Restricts or prevents your device from sharing any data or media from other apps with the Android Zoom client using Android’s share intent feature. Disabled
iOS- This configuration prevents the Zoom client from receiving data or media from other apps via Apple’s share extensions in other apps. Disabled
Disable certificate pinning allows a client to disable the need to verify the certificate against saved copies of that certificate. Disabled

Login

Zoom’s login settings can be modified under the Login tab, including choosing whether certain security options will be enabled/disabled as well as configuring separate SSO login domains, including enabling/disabling certain security options.

There are a number of settings that can be changed:

Setting Policy Default
Enforce login with SSO Force login with SSO (Single Sign-On) only. Disabled
Disable SSO login Disables login via SSO (Single Sign-On). Disabled
Disable email login Disables login with email and password. Disabled
Disable Facebook login Disables login with Facebook OAuth. Enabled
Disable Google login Disables login with Google OAuth. Enabled
Disable Apple login Disables login with Apple OAuth. Disabled
Use embedded web page while SSO login (iOS Only) When enabled, Zoom will use the embedded browser for SSO login instead of using whichever standard browser appears on the device. Disabled
Enforce the company domain for SSO sign-in settings, and lock the url to the company’s SSO username when a client logs in (Single Sign-On). Disabled
SSO Login Company Domain This setting specifies the URL of the default SSO login domain for Zoom; for example, abc.zoom.us.
Sign in to Zoom with the following specified domains This option restricts the client’s ability to log in using a specific email domain (separated by “&”); Examples: abc.com & zoom.us. Disabled

 

Chat

There is the option for setting default settings for message behavior under the Chat tab, as well as enforcing this setting to all users.

There are a number of settings that can be changed:

Setting Policy Default
Move messages with new replies to the bottom of the chat This feature will automatically move messages from the bottom of the chat when a new reply is made. When this feature is disabled, message threads will be displayed chronologically. Disabled
Make Sort Message setting mandatory for all users in your account enables you to enforce the behavior specified under Move messages with new replies to the bottom of the chat. Disabled

Note: You will need to select this option under Move messages.. in order for this to work.

Webview

In the WebView tab, administrators can enable WebView filters for approved websites, as well as set block lists of sites that should not be displayed using WebView.

Note:

There are several reasons why a WebView filter may be disabled. The most common reason is that the approved list can be empty, so all URLs may be blocked, even if they are not explicitly listed on the approved list. Even if a particular URL is not added to the approved list, the domain will still load if the specific URL is not.

It is also possible to enable Android-specific policies and settings in addition to the WebView setting:

Setting Policy Default
Enforce Same-origin policy – This creates an environment that permits scripts embedded in web pages to access data residing on other web pages if they have the same origin. Disabled
Disable JavaScript and Plugin allows you to disable the performance of Javascript scripts and Java plugins on web pages within the embedded browser. Enabled
Disable cache disables the caching of data within the embedded browser. Enabled
Disable local file access – Disables the embedded browser from accessing the device’s local storage, so that it cannot make use of it. Enabled
Upon logout, sessions and cookies will be deleted immediately after the client logs out. The same will happen when the embedded web browser is logged out. Enabled

 

Meeting

You can set default settings or behaviors for in-meeting and joining a meeting for the application under the Meeting tab. Below are some of the settings you can set:

Setting Policy Default
Show dialog to confirm the join When the user attempts to join a meeting using a link that has opened in another app, the join meeting dialog is made available. Disabled
Require authentication to join (does not apply to webinars) If the user wants to join a meeting he or she must be logged into the client first. Disabled
Disable screen share This function disables and hides the feature of sharing the screen. Disabled
Disable Bookmarks This function disables and hides the sharing features for bookmarks. Disabled
Disable whiteboard (only iPad in iOS, for all Android devices) This disables the whiteboard sharing feature, causing it to be hidden. Disabled
Disable rename participants in the meeting This option disables and hides the host’s ability to rename participants. Disabled
Disable in meeting chat hides and disables the feature of chatting during a meeting. Disabled
Disable cloud recording hides and disables the feature of recording cloud meetings. Disabled
Disable Virtual Background hides and disables the feature of the Virtual Background. Disabled
Disable Q&A in webinars turns off the Q&A feature. Disabled
Meeting reminder (iOS only) Allows you to enable or disable reminders for upcoming meetings. Enabled
Make Meeting Reminder setting mandatory for all users in your account This setting enables or disables the meeting reminder functionality within your client and locks it. Disabled
Sync Zoom Meetings to calendar This option allows you to sync your calendars with Zoom and it checks your device’s calendar for Zoom events. Enabled
Sync Zoom meetings from calendar (iOS only) This setting enables the synchronization of calendars with Zoom on iOS devices only, and checks to see if any Zoom meetings are scheduled on your device’s calendar. Enabled
Make syncing Zoom meetings from calendar mandatory for all users in your account (iOS only) By activating and locking the synced calendars setting on iOS devices only, you can check for Zoom meetings that are scheduled on your device calendar. Disabled

 

Note: Zoom Meetings are automatically synchronized to your calendar and Zoom Meetings are automatically synchronized from your calendar (for iOS only).

Features of BlackBerry Dynamics (iOS)

Bypass Unlock Policy can be added under BlackBerry Dynamics Features (iOS) tab, which defines whether the following call user interface or not is displayed when an iOS device is locked. It is important to recognize that this setting requires BlackBerry Dynamics mobile software. There are a number of menu options available.

  • A screen appears when a meeting call is incoming
  • on the screen that appears when a meeting call is incoming
  • you will see the “Meeting Calling Out Screen”
  • that tells you when a Zoom call is incoming
  • from the Zoom Phone Call Screen
  • that tells you when a Zoom call is incoming

Default Blackberry Dynamic Policy “Require password after a period of inactivity” is set by default. However, if you want to get it to work, then you will have to enable the setting for the Blackberry Dynamic Policy “Require password after a period of inactivity”.

The BlackBerry Dynamics app is available on Android and it has a variety of features.

The Bypass Unlock Policy can be set under the BlackBerry Dynamics Features (Android) tab. This lets you establish whether or not the following call interface should appear when an Android device is locked. You can select from the following menu options:

  • Call Screen for Incoming Meetings
  • Screen to be viewed during in-meeting meetings
  • is known as the Meeting Call Out Screen
  • Screen
  • Screen, which displays information about incoming Zoom phone calls
  • while a Zoom phone call is in progress
  • Screen, which displays information about incoming Zoom phone calls

Note: Although this setting is default enabled for Blackberry Dynamic policy, it is also subject to whether the Blackberry policy item “Require password after a period of inactivity” is set on the device.