Enterprise BlackBerry Integration Guide

Resources for BlackBerry Admins

Guide: Deploy Movius for BlackBerry using Good Control

This document describes the necessary steps for setting up Movius for BlackBerry to work within a Good EMM environment. 

These steps should be performed by the BlackBerry administrator before Movius for BlackBerry MultiLine administrators can begin adding users in the Management Portal and must be performed before users can successfully activate the apps. 

Info

Note: This guide covers important settings that allow the Movius for BlackBerry app to work correctly and to ensure your organization is able to enforce your compliance policies. It isn't a complete guide to all settings in BlackBerry Good Control, for that see BlackBerry Good Control documentation.

Step 1: Configure the policy set for Movius for BlackBerry users

For all instructions in this section, you'll be in the Policies > Policy Sets > BlackBerry Work section of BlackBerry Good Control.

Disable use of Native Phone

To prevent users from making calls or SMS on their native phone number and restrict use to Movius for BlackBerry, you need to uncheck the option in the Policy Set:

  1. To add or edit a policy set, go to Policy Sets under Policies
  2. On the Manage Policy Set screen, go to Apps >App Specific Policies > BlackBerry Work.
  3. Go to the Interoperability tab.
  4. In the Voice and SMS categories, deselect permissions to use native phone features and select options to use VOIP apps. Note: while Movius for BlackBerry is not a VOIP-only app, but this setting allows the app to be used for calls. 
  5. Click Update.

Disable Contacts sync to native

Use these settings to control use of BlackBerry Contacts. If you allow syncing to device 

  1. To add or edit a policy set, go to Policy Sets under Policies
  2. On the Manage Policy Set screen, go to Apps >App Specific Policies > BlackBerry Work.
  3. Go to the Address Book tab.
  4. In the Address Book Sync section.
    1. Deselect Allow syncing BlackBerry Contacts to deviceNote: selecting Allow syncing BlackBerry Contacts to device makes it possible for the native device to contact the BlackBerry Contacts.
    2. Deselect Allow device to use BlackBerry Contacts for Caller ID.

Set up sync to the Exchange Server

Use these settings to allow Movius for BlackBerry to access their Exchange Contacts inside the Movius for BlackBerry app. 

Movius for BlackBerry will not upload, store, or transmit the Exchange contacts. The sync will only allow the display and use of the contacts by the user within the app locally. 

  1. To add or edit a policy set, go to Policy Sets under Policies
  2. On the Manage Policy Set screen, go to Apps >App Specific Policies > BlackBerry Work.
  3. Go to the Basic Configuration tab.
  4. Complete the fields for Exchange ActiveSync Settings, including Default. Domain, ActiveSync Server, and Autodiscover URLNote: Completing the Autodiscover URL allows users to sync to the server without manually filling in server details. 

Set up OTP/Office 365

Use these settings to set up SSO and OTP authentication. 

  1. To add or edit a policy set, go to Policy Sets under Policies
  2. On the Manage Policy Set screen, go to Apps >App Specific Policies > BlackBerry Work.
  3. Go to the Advanced Configuration tab.
  4. Select Use Office 365 Settings.
  5. Select Use Office355 Modern Authentication
  6. Enter Azure App ID.
  7. Enter Office 365 Tenant ID.

Bypass Unlock Splash Screen

Use these settings to make sure that users can see who is calling without authentication.

  1. To add or edit a policy set, go to Policy Sets under Policies
  2. On the Manage Policy Set screen, go to Apps >App Specific Policies > BlackBerry Work.
  3. Select Allow parts of the user interface to be displayed when idle lock is in place. 
  4. Select Enable Custom Splash Screen. 
  5. Click Update. 

Step 2: Add new users

This step will send an invitation to a user. Adding a Good user requires an email address, a desired App Group, and Policy Set.

Use these steps if the users' email addresses are in the accepted domains. Otherwise use the next steps for Add custom users, instead.

  1. Go to Users and Groups
  2. Click Add Users
  3. There are two ways to add users:
    1. If they're in the directory service, import the user by searching their name
    2. Otherwise, add a custom user
      1. Fill in the Email Address, First Name, and Last Name fields, then click Submit
  4. Select from the list to change to the desired policy set. Refer to BlackBerry documentation for instructions on custom policy sets.
  5. Click the edit pencil for App Groups to select the ones that you've set up for your Movius for BlackBerry users from the list, and click OK.

Step 3: Create App Groups for Movius for BlackBerry users

App groups define which apps users are able to see, such as the Movius for BlackBerry app. You will add members and apps to the App groups. 

  1. Go to App Groups under Apps
  2. Click the plus icon to create a new group.
  3. Click Members then Add to add people to the app group.
  4. Click Apps then Add More to add Movius for BlackBerry and any other desired apps.
  5. Select the apps and click OK.
  6. Verify that all the apps you want the group to access are added in the Apps section.

Add Movius for BlackBerry to BlackBerry Control

If the Movius for BlackBerry app doesn't appear automatically in your organization, you may need to add it to your Control server from the public store.

Add Movius for BlackBerry to BlackBerry Control Server

  1. Go to Manage Apps and click Add App.

  2.  Select Public App Store.
  3. Enter Public Store URL: https://apps.apple.com/us/app/movius-for-blackberry/id1291542514 and click Next.
  4. Click Add App.


Configure policy settings for Movius for BlackBerry in Good Control

These instructions provide information on important policy settings that you should set in Policies > Policy Sets > BlackBerry Work section of BlackBerry Good Control.

Disable use of Native Phone

To prevent users from making calls or SMS on their native phone number and restrict use to Movius for BlackBerry, you need to uncheck the option in the Policy Set:

  1. To add or edit a policy set, go to Policy Sets under Policies
  2. On the Manage Policy Set screen, go to Apps >App Specific Policies > BlackBerry Work.
  3. Go to the Interoperability tab.
  4. In the Voice and SMS categories, deselect permissions to use native phone features and select options to use VOIP apps. Note: while Movius for BlackBerry is not a VOIP-only app, but this setting allows the app to be used for calls. 
  5. Click Update.

Disable Contacts sync to native

Use these settings to control use of BlackBerry Contacts. If you allow syncing to device 

  1. To add or edit a policy set, go to Policy Sets under Policies
  2. On the Manage Policy Set screen, go to Apps >App Specific Policies > BlackBerry Work.
  3. Go to the Address Book tab.
  4. In the Address Book Sync section.
    1. Deselect Allow syncing BlackBerry Contacts to deviceNote: selecting Allow syncing BlackBerry Contacts to device makes it possible for the native device to contact the BlackBerry Contacts.
    2. Deselect Allow device to use BlackBerry Contacts for Caller ID.

Set up sync to the Exchange Server

Use these settings to allow Movius for BlackBerry to access their Exchange Contacts inside the Movius for BlackBerry app. 

Movius for BlackBerry will not upload, store, or transmit the Exchange contacts. The sync will only allow the display and use of the contacts by the user within the app locally. 

  1. To add or edit a policy set, go to Policy Sets under Policies
  2. On the Manage Policy Set screen, go to Apps >App Specific Policies > BlackBerry Work.
  3. Go to the Basic Configuration tab.
  4. Complete the fields for Exchange ActiveSync Settings, including Default. Domain, ActiveSync Server, and Autodiscover URLNote: Completing the Autodiscover URL allows users to sync to the server without manually filling in server details. 
     

Set up OTP/Office 365

Use these settings to set up SSO and OTP authentication. 

  1. To add or edit a policy set, go to Policy Sets under Policies
  2. On the Manage Policy Set screen, go to Apps >App Specific Policies > BlackBerry Work.
  3. Go to the Advanced Configuration tab.
  4. Select Use Office 365 Settings.
  5. Select Use Office355 Modern Authentication
  6. Enter Azure App ID.
  7. Enter Office 365 Tenant ID.

Bypass Unlock Splash Screen

Use these settings to make sure that users can see who is calling without authentication.

  1. To add or edit a policy set, go to Policy Sets under Policies
  2. On the Manage Policy Set screen, go to Apps >App Specific Policies > BlackBerry Work.
  3. Select Allow parts of the user interface to be displayed when idle lock is in place. 
  4. Select Enable Custom Splash Screen. 
  5. Click Update. 

Configure 3rd Party Universal Link 

To enable communication between BlackBerry Work app and Movius for BlackBerry app, setting Universal Link configuration is essential for the new simplified onboarding flow in Movius for BlackBerry.

There are separate procedures to set this up for iOS and Android. Click the tab below to view.

iOS

  1. Go to Policy Sets > Apps > BlackBerry Work >  Interoperability
  2. In the Launch 3rd Party App Universal Link (iOS Only) section, enter moviuscorp.page.link into the field and click Update.

Android

  1. Go to Policy Sets > Apps > BlackBerry Work > App Specific Policies > BlackBerry Access > General
  2. Check the box for Enable 3rd Party Applications and add intent in the Enter comma separated URL schemes (No spaces. Limit 4K characters) text field.

Enable Crash Reporting

Enabling crash reporting allows Movius to collect the crash reports from Firebase to diagnose issues and improve app quality


Whitelist Movius hostnames and ports (if RouteALL is configured) in Good Control

Customers with RouteALL configured in BlackBerry Control should whitelist the Movius hostnames and ports in BlackBerry Control to allow the app data to access the Movius platform for TCP calls via the Dynamics servers.

Customers may also have to allow TCP ports 8021, 5061 and 143/993 to pass through their corporate firewall\proxy for the same Movius hostnames or for all Movius servers (*.moviuscorp.net).

Whitelist Movius for BlackBerry in BlackBerry Control:

  1. Go to Manage Apps and click Movius for BlackBerry
  2. Open the BlackBerry Dynamics tab
  3. Click Edit in the 0 Server section
  4. Add a Host Name Note: this is provided by your Movius representative
  5. Add the following ports by clicking the + 
    1. port 8021
    2. port 5061
    3. port 143
  6. Click Save 

Test via BlackBerry Access

Browse to https://FQDN:8021 – A Linux test page indicates successful connection