Locking Down the Splashtop SOS Mobile App for Exclusive Team Use (iOS and Android)

Overview

The Splashtop SOS mobile app for iOS and Android is publicly available in the App Store and Google Play Store. If you want to ensure that SOS session codes generated on mobile devices can only be accessed by your own Splashtop team, this can be enforced using a mobile device management (MDM) solution.

This is done by applying a managed app configuration key: TEAM_CODE.

This method works for both iOS and Android.

How It Works

When the TEAM_CODE configuration is applied:

  • End users can still open the SOS app and generate a standard session code.
  • Only technicians signed in to the same Splashtop team (tenant) can see and connect to those session codes.
  • External or unauthorized Splashtop accounts cannot connect.

This allows organizations to deploy the standard SOS mobile app while restricting its use to their internal support team.

Requirements

  • A Splashtop account
  • A mobile device management (MDM) solution (for example, Microsoft Intune)
  • The Splashtop SOS app is deployed as a managed app
  • TEAM_CODE provided by Splashtop

Note: The TEAM_CODE is not visible in the Splashtop console. Please contact Splashtop Support or your Splashtop representative to obtain it.

Configuration Key

Key Name

Value Type

Value

Description

TEAM_CODE

String

Unique value provided by Splashtop Support

Locks the SOS app to your Splashtop team

Microsoft Intune Deployment

Below is a high-level overview of how this is configured in Microsoft Intune. The exact steps may vary slightly depending on your environment.

iOS / iPadOS (Intune)

Requirements

  • Devices must be MDM-enrolled
  • Splashtop SOS must be added as an iOS store app
  • App configuration must target managed devices

Steps

  1. In Intune, add Splashtop SOS from the iOS App Store as a managed app:
    • Go to Apps > iOS/iPadOS > Create iOS Store app
    • Select iOS store app
    • Search for and add Splashtop SOS
    • Review and create 
  2. Create an App configuration policy:
    • Go to Apps > Manage apps > Configuration > Create (Managed devices)
    • Platform: iOS/iPadOS
    • Profile type: Managed devices
    • Targeted app: Splashtop SOS
  3. Add the configuration:
    • Configuration settings format: Use configuration designer
    • Configuration key: TEAM_CODE
    • Value type: String
    • Configuration value: Provided by Splashtop
  4. Assign the policy to the target devices.
Android (Intune)

Requirements

  • Intune tenant must be connected to Managed Google Play
  • Devices must be enrolled using Android Enterprise
  • Splashtop SOS must be deployed as a Managed Google Play app

Steps

  1. (One-time) Connect Intune to Managed Google Play (if not already connected):
    • Go to Devices > Android > Android enrollment
    • Select Managed Google Play and complete the Connect process
  2. Add Splashtop SOS as a Managed Google Play app:
    • Go to Apps > Android > Create
    • Select Managed Google Play app
    • Search for Splashtop SOS, approve it, and sync the app
  3. Create an App configuration policy:
    • Go to Manage apps > Configuration > Create
    • Platform: Android
    • Profile type: Managed apps
    • Targeted app: Splashtop SOS
  4. Add the configuration:
    • Configuration settings format: Use configuration designer
    • Configuration key: TEAM_CODE
    • Value type: String
    • Configuration value: Provided by Splashtop
  5. Assign the policy to the target users or devices.

Notes

  • This configuration does not modify the app’s branding or interface.
  • The same TEAM_CODE works for both iOS and Android.
  • End User Experience: The SOS app works as usual. Users generate and share a session code, and only authorized technicians from your Splashtop team can connect. There are no additional prompts or visual indicators in the app.
  • For locking down the desktop version of the SOS application, please refer to Custom SOS Packages

 

0 out of 0 found this helpful