As we all know, installing an inhouse signed iOS enterprise app manually on a device, will prompt the user to trust the Enterprise Developer before first use of the app.
However I'm currently looking into better options for iOS distribution scenarios where neither Public App Store, MDM nor connecting the device to a admin machine are options.
This documentation about the installation flow an enterprise app store seems to suggest that there is a flow where the user manually installs the iOS configuration profile first and then installs the IPA as usual in a second step. The screenshots in the documentation do not show any untrusted developer warning. I tried to reproduce the flow with a iOS configuration profile created in Apple Configurator 2 and signed with the inhouse distribution cert of the app I attempted to open afterwards. Unfortunately it would still bring up the warning for me, so either it is not possible or I missed something.
Question: Is it possible to get around the untrusted developer warning by manually installing an iOS configuration profile (e.g. including the inhouse distribution certificate) over the air beforehand? If yes, how does the configuration profile needs to be set up?
If this would be possible, it could improve UX for enterprise users by having a clean 2-step installation flow vs. a 1-step installation with a shady warning:
Known user flow 1) Go to website 2) Download app 3) Open --> warning 4) Trust in settings 5) Open --> success --> works, bad UX | User flow in question 1) Go to website 2) Download profile 3) Accept profile install 4) Download app 5) Open --> success --> is this possible??? |
Thank you for your help!