App configuration
Threema Work allows to remotely edit app settings. You can control the app’s configuration, disable specific features, and the end user is relieved from setting up the app manually.
Configuration via MDM software
On Android and iOS, apps can be installed in a Managed Profile to separate personal and professional use. Apps that are installed this way can be remotely configured using an MDM system.
Threema Work supports the following platforms and profile types:Platform | System requirement | Supported profile type |
---|---|---|
Android | Android 5.0+ | Android Enterprise / Managed Configurations |
iOS | iOS 7+ | Managed App Configuration |
To ensure compatibility, please contact the developer of your MDM system.
To learn more about rollout and deployment, please consult the documentation.
Configuration via management cockpit (Threema MDM)
If you don’t use an MDM system for the app’s deployment, Threema MDM is a convenient way of controlling the app’s settings in the management cockpit. With Threema MDM, the same parameters that are available when using a regular MDM system can be configured. Learn more…
Video tutorial
Configuration parameters
Name
Type
Min
Max
OS
Renewable1
User-editable2
Default value
Threema MDM
th_license_username
Username required to activate the app
Type
stringMin
1Max
255OS
AllRenewable1
NoUser-editable2
NoDefault value
-Threema MDM
Noth_license_password
Password required to activate the app
Type
stringMin
1Max
-OS
AllRenewable1
NoUser-editable2
NoDefault value
-Threema MDM
Noth_nickname
The nickname appears in the contact details (as well as in push notifications).
Type
stringMin
0Max
32OS
AllRenewable1
YesUser-editable2
YesDefault value
-Threema MDM
Yesth_firstname
First name of the user; visible in Work cockpit and API.
Type
stringMin
-Max
255OS
Android (3.43k), iOS (3.0.9k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yesth_lastname
Last name of the user; visible in Work cockpit and API.
Type
stringMin
-Max
255OS
Android (3.43k), iOS (3.0.9k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yesth_csi
CSI (Customer Specific Identifier) can be any value (e.g., an internal employee reference); this value is only visible in the management cockpit, not in the app.
Type
stringMin
-Max
255OS
Android (3.43k), iOS (3.0.9k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yesth_category
User category (e.g. group, department); visible in Work cockpit and API.
Type
stringMin
-Max
255OS
Android (3.43k), iOS (3.0.9k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yesth_linked_email
The email address linked to a Threema ID is used for contact synchronization.
Type
stringMin
-Max
-OS
AllRenewable1
NoUser-editable2
YesDefault value
-Threema MDM
Yesth_linked_phone
The phone number linked to a Threema ID is used for contact synchronization; it must be specified in international format, e.g., +41555114900.
Type
stringMin
-Max
-OS
AllRenewable1
NoUser-editable2
YesDefault value
-Threema MDM
Yesth_id_backup
This parameter is used to pass precalculated key pairs (Threema IDs) and restore ID backups. This parameter is deprecated, please use
th_safe_restore_id
instead.Type
stringMin
99Max
99OS
AllRenewable1
NoUser-editable2
NoDefault value
-Threema MDM
Yesth_id_backup_password
Password for ID backup in
th_id_backup
. This parameter is deprecated, please use th_safe_password
instead.Type
stringMin
8Max
-OS
AllRenewable1
NoUser-editable2
NoDefault value
-Threema MDM
Yesth_safe_enable
If set to
true
, Threema Safe must be used; if set to false
, Threema Safe cannot be used. (If not set at all, Threema Safe can be used.)Type
boolMin
-Max
-OS
Android (3.62k), iOS (4.2.1k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yesth_safe_password
Password to encrypt (or restore, cf.
th_safe_restore_id
) Threema Safe backup (not available in Threema MDM)Type
stringMin
8Max
4096OS
Android (3.62k), iOS (4.2.1k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Noth_safe_server_url
URL for custom Threema Safe server, e.g., examplecompany.com/threemasafe
Type
stringMin
-Max
-OS
Android (3.62k), iOS (4.2.1k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yesth_safe_server_username
Username for HTTPS authentication of Threema Safe server defined in
th_safe_server_url
(if required)Type
stringMin
-Max
-OS
Android (3.62k), iOS (4.2.1k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yesth_safe_server_password
Password for HTTPS authentication of Threema Safe server defined in
th_safe_server_url
(if required)Type
stringMin
-Max
-OS
Android (3.62k), iOS (4.2.1k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yesth_safe_restore_enable
If set to
false
, Threema Safe backups cannot be restored. If set to true
, restoring a Threema Safe backup in the setup wizard is either optional (if th_safe_restore_id
is not set) or mandatory (if th_safe_restore_id
is set).Type
boolMin
-Max
-OS
Android (3.62k), iOS (4.2.1k)Renewable1
NoUser-editable2
NoDefault value
-Threema MDM
Yesth_safe_restore_id
Threema ID to restore from Threema Safe if
th_safe_restore_enable
is true
. If th_safe_password
is also set, the ID is restored without user interaction.Type
stringMin
8Max
8OS
Android (3.62k), iOS (4.2.1k)Renewable1
NoUser-editable2
NoDefault value
-Threema MDM
Yesth_safe_password_pattern
Regular Expression (Regex) that defines the format of the password chosen by the user for Threema Safe. If not set, only a minimum length of 8 characters is enforced. The regular expression must be compatible with Java Pattern (Android) and NSRegularExpression (iOS).
Type
stringMin
-Max
-OS
Android (4.2k), iOS (4.4k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yesth_safe_password_message
Error message that is shown if the password that the user has chosen for Threema Safe does not match the pattern in
th_safe_password_pattern
.Type
stringMin
-Max
-OS
Android (4.2k), iOS (4.4k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yesth_contact_sync
If set to
true
, synchronization with the local address book is enabled.Type
boolMin
-Max
-OS
AllRenewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_hide_inactive_ids
If set to
true
, inactive IDs (i.e., IDs that have not been in use for at least three months) and revoked IDs are hidden.Type
boolMin
-Max
-OS
Android (4.2k), iOS (4.4k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_readonly_profile
If set to
true
, the user cannot change the following profile settings: nickname, profile picture, email address / phone number linked to the ID, export ID, delete ID, ID revocation password.
The use of Threema Safe and the export of the Threema ID can be prevented using the parameters th_safe_enable
and th_disable_id_export
, respectively.Type
boolMin
-Max
-OS
AllRenewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_block_unknown
If set to
true
, unknown contacts (i.e., contacts not contained in the device's address book) are blocked.Type
boolMin
-Max
-OS
AllRenewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_save_to_gallery
If set to
true
, media files will not be auto-saved to the local gallery.Type
boolMin
-Max
-OS
Android, iOS (2.7.3k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_screenshots
If set to
true
, the user cannot take screenshots on Android, and no thumbnail is displayed in Android’s app switcher.Type
boolMin
-Max
-OS
AndroidRenewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_add_contact
If set to
true
, the user cannot manually add contacts. Contacts can only be added via contact synchronization (if not disabled; see th_contact_sync
) or by receiving messages from unknown contacts (if not disabled; see th_block_unknown).Type
boolMin
-Max
-OS
Android (2.82k), iOS (2.7.3k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_export
If set to
true
, the user cannot export chats.Type
boolMin
-Max
-OS
AllRenewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_backups
If set to
true
, the user cannot create any kind of backup. This parameter overrides th_safe_enable
, th_disable_data_backups
, th_disable_system_backups
and th_disable_id_export
.Type
boolMin
-Max
-OS
AllRenewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_id_export
If set to
true
, the user cannot export their ID.Type
boolMin
-Max
-OS
Android (3.7k), iOS (4.2.1k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_data_backups
If set to
true
, the user cannot create data backups (only available on Android).Type
boolMin
-Max
-OS
Android (3.7k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_system_backups
If set to
true
, Threema data is excluded from iTunes/iCloud backups. Not relevant for Android.Type
boolMin
-Max
-OS
iOS (4.2.1k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_message_preview
If set to
true
, the message preview in push notifications is disabled.Type
boolMin
-Max
-OS
Android (3.02k), iOS (2.9.1k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_send_profile_picture
If set to
true
, the user’s profile picture will not be shared with others.Type
boolMin
-Max
-OS
Android (3.14k), iOS (2.10.1k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_calls
If set to
true
, Threema calls (both voice and video calls) are disabled.Type
boolMin
-Max
-OS
Android (3.2k), iOS (3.0k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_video_callsNew
If set to
true
, Threema video calls are disabled. Quality settings remain editable.Type
boolMin
-Max
-OS
Android (4.41k), iOS (4.6.1k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_skip_wizard
If set to
true
, the setup wizard that would show up on the first app launch is skipped.Type
boolMin
-Max
-OS
Android (3.2k), iOS (3.0.6k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_create_group
If set to
true
, the user cannot create groups.Type
boolMin
-Max
-OS
Android (3.3k), iOS (3.0.4k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_disable_web
If set to
true
, Threema Web is disabled.Type
boolMin
-Max
-OS
Android (3.551k), iOS (4.0.3k)Renewable1
YesUser-editable2
NoDefault value
falseThreema MDM
Yesth_web_hosts
If set, Threema Web can only connect to the defined servers.
As value, a comma-separated list of hostnames is expected. If a hostname starts with *, suffix matching is applied, in the other case, the hostname must match completely.
Example: signaling.threema.ch,*-signaling-test.threema.ch
Type
stringMin
-Max
-OS
Android (4.1k), iOS (4.4k)Renewable1
YesUser-editable2
NoDefault value
-Threema MDM
Yes