Configuration using an MDM system

On Android and iOS, apps can be installed in a Managed Profile to separate personal and professional use. This allows to remotely configure apps using an MDM system. The advantage: End users are relieved from setting up the app manually, and the organization can verify that the setup was performed correctly. Note that not all MDM systems offer configuration using key-value pairs yet. To ensure compatibility, please consult the developer of your MDM system.

System requirements for Threema Work:

Platform Supported OS versions Supported profile types
Android Android 5.0+ Android for Work App Restrictions
iOS iOS 7+ Managed App Configuration
Windows Phone WP 8.1+ Configuration using URL actions (Windows Phone). Configuration using MDM parameters is not supported.

Threema Work currently recognizes the following configuration parameters:

th_license_username

Username required to activate the app.

Type
String
Min
1
Max
-
Renewable*
yes
Sample
mrthreeman

th_license_password

Password required to activate the app.

Type
String
Min
1
Max
-
Renewable*
yes
Sample
kxas9aKS

th_nickname

A user's nickname appears in recipients' push notifications for messages from that user and in the user's contact details.

Type
String
Min
0
Max
32
Renewable*
no
Sample
Peter Schreiner

th_linked_email

Email address that is linked to the Threema ID so that other users can find it via contact synchronization.

Type
String
Min
-
Max
-
Renewable*
no
Sample
peter.schreiner@mail.com

th_linked_phone

Phone number that is linked to the Threema ID so that other users can find it via contact synchronization.

Type
String
Min
-
Max
-
Renewable*
no
Sample
+41555114900

th_contact_sync

Enable or disable synchronization with the local address book.

Type
Bool
Min
-
Max
-
Renewable*
no
Default
false

th_readonly_profile

If true, predefined parameters (such as linked email address, nickname, etc.) can't be changed by the user.

Type
Bool
Min
-
Max
-
Renewable*
yes
Default
false

th_block_unknown

If true, unknown contacts (i.e., contacts not contained in the device's address book) are blocked.

Type
Bool
Min
-
Max
-
Renewable*
yes
Default
false

th_id_backup

This parameter is used to pass precalculated key pairs (Threema IDs) and restore ID backups.

Type
String
Min
99
Max
99
Renewable*
no
Sample
AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA-AAAA

th_id_backup_password

Password for ID backup in th_id_backup.

Type
String
Min
8
Max
4
Renewable*
no
Sample
s3cr3t123

th_disable_save_to_gallery

Disable saving of unencrypred media to gallery (iOS: version 2.7.3 and up)

Type
Bool
Min
-
Max
-
Renewable*
yes
Default
false

th_disable_screenshots

Disable screenshots and thumbnails. Android-only

Type
Bool
Min
-
Max
-
Renewable*
yes
Default
false

th_disable_add_contact

Disable manually adding contacts; new contacts may only be added through contact sync or on incoming messages from unknown contacts (iOS: version 2.7.3 and up, Android: 2.82 and up). Typically used in conjunction with th_block_unknown.

Type
Bool
Min
-
Max
-
Renewable*
yes
Default
false

th_disable_export

Disable chat exports.

Type
Bool
Min
-
Max
-
Renewable*
yes
Default
false

th_disable_backups

Disables ID-, cloud and data backups.

Type
Bool
Min
-
Max
-
Renewable*
yes
Default
false

th_disable_message_preview

Disables text/content preview in push notifications (iOS: version x.x.x and up, Android: x.xx and up).

Type
Bool
Min
-
Max
-
Renewable*
yes
Default
false

*Renewable yes: these values can be modified after the ID setup. In order to change any of the other values, the ID must be deleted. In Threema Work for Windows Phone, Renewable is not supported.

If an ID backup exists, it will be restored. If an error occurs, the UI to restore an ID is displayed. If no ID backup exists, the UI to generate an ID is displayed.