With iOS devices and single-purpose devices finding an exponential level of usage in organizations, ensuring devices are locked to specific apps and/or settings becomes a cumbersome task for system administrators. With Kiosk for iOS devices, this can be easily and efficiently solved as it lets you lock the devices to specific and/or settings as well as ensure the user cannot move away from the app or modify the settings. Additionally, users cannot access any other features present on the device. The other advantage is that, you can also provision Web Clips under Kiosk as well. You can enable kiosk for Apple TV and iOS devices.Kiosk can be understood better from the following flow diagram:

Provisioning app(s) under Kiosk

App Automation

As the name suggests, MDM MSP lets you automate installation of Kiosk-provisioned apps(both Store and enterprise apps) to ensure seamless Kiosk profile association. To automate Kiosk-app installation, VPP needs to be configured to ensure apps install without requiring Apple ID and only apps purchased through VPP can be installed silently on the devices. In case of enterprise app, there is no such requirement. This is supported only for single-app kiosk. You can learn more about silent installation of apps using VPP here.

It is recommended that you ensure the app has adequate licenses, before associating the Kiosk profile to groups/devices. You can know license details of any app by, navigating to App Repository and clicking on the app.

App Update Automation

In addition to silent installation of Kiosk-provisioned apps, MDM MSP also allows you to update these apps silently without any user intervention. This is supported only for single-app kiosk. In case of updating VPP-purchased apps, devices secured with a passcode are automatically locked over-the-air and if the device has no passcode, the device will be temporarily inoperable or be provisioned with MDM MSP as the Kiosk app during the update. If the apps provisioned under Kiosk are not purchased via VPP, you need to remove the Kiosk profile, update the apps and then re-associate the Kiosk profile. For enterprise apps, the app gets updated in the background without affecting the app usage. The apps will be updated silently only if VPP is configured to ensure apps install without requiring Apple ID

It is recommended that you update the apps during scheduled device maintenance to avoid operational breakages.


Policy Description



Kiosk Mode

Specify the mode based on whether the device is to be locked to a single app or multiple apps. In multi-app Kiosk mode, the device can still access Phone and Settings

Allowed App(s)

Select the app(s) to be provisioned under Kiosk in the device. Usage of the device is singled down to access/using only the Kiosk app(s). Any app in the enrolled device and apps in the app repository can be specified. If the app is not available in the device, it is recommended to push the app first and then the Kiosk profile.

SETTINGS(Applicable only if Kiosk Mode is configured as 'Single App')


Enabling this will lock the device to a single screen. User cannot perform any touch operations, other than waking up the device.

Screen Rotation

Screen rotation can be enabled or disabled using this option

Volume Buttons

If volume buttons are disabled, user cannot increase or decrease the volume on the device by using the physical buttons on the device

Ringer Switch

Diasbling this restricts the user from changing the existing settings. If the device is in silent mode, then the device will remain the same and user will not have any control over it

Sleep/Wake Button

Diasbling this restricts the user from changing the existing settings. If the device is awake, then the device will remain the same and user will not have any control over it

Auto Lock

Enable/Disable Auto Lock option in the device.This configuration overrides the Auto-lock option set in Passcode policy, if both the policies distibuted to the same device..

Speak Selection

Enable/Disable speak selection in the device.

Mono Audio

Enable/Disable Mono Audio in the device.


Enable/Disable VoiceOver in the device


Enable/Disable Zoom accessibility settings in the device

Invert Colours

Enable/Disable Invert Colours options in the device

Assistive Touch

Enable/Disable Assistive Touch in the device

Best Practices

See Also:  Associating Profiles to Groups, Associating Profiles to Devices,  App Management, Distribute Apps to Devices, Distribute Apps to Groups
Copyright © 2019, ZOHO Corp. All Rights Reserved.