Hi,
I want to understand how Per-App VPN can be configured on iOS. Specifically:
Is Per-App VPN something that can be controlled directly from code (inside an app), or does it always require MDM / configuration profiles (.mobileconfig)?
If it requires a configuration profile, how can I specify which apps (by bundle identifier) should use the VPN?
Is it possible to let users dynamically choose apps for Per-App VPN, or is this strictly managed by MDM?
My goal is to make sure that only apps selected by user dynamically use the VPN connection, while other apps continue to use the normal network.
Any official Apple documentation, examples, or guidance would be greatly appreciated.