This release is exactly what the title promises: an outpour of updates across the Scalefusion platform. From bulk eSIM deployment and Remote Control 2.0 to OneIdP enhancements and Windows improvements, there's plenty to explore.

Release Versions

  1. Scalefusion Dashboard: v67.0.0

  2. Scalefusion Windows MDM Agent: v16.14.9

  3. Scalefusion macOS MDM Agent: v6.2.4

  4. Scalefusion Android MDM Agent: v22.0.1

  5. Scalefusion FileDock Agent: v5.0.0

  6. Scalefusion Remote Cast for Android: v5.1.0

1. Introducing eSIM Deployment

Provisioning eSIMs for Android devices is now easier with support for bulk eSIM deployment. From General Configuration → Android Utilities, you can deploy eSIMs to multiple Corporate-Owned (COD) and BYOD devices in a single workflow.

To simplify large-scale deployments, you can map each eSIM activation code to an EMM-managed device using any of the following identifiers:

Identifier

Applicable to

Device Name

COD, COPE & BYOD

Serial #

COD, COPE

IMEI #

COD, COPE

EID

COD, COPE & BYOD

ICCID

COD, COPE

Once deployed, you can track the activation status of every eSIM from the Full Device Information page, Device Info APIs, and the Device Inventory Report.

For BYOD devices, Scalefusion prompts users to grant permission to share their EID, enabling the platform to read the identifier and activate the eSIM.

Note: If multiple eSIMs are published to the same device, the first eSIM is activated automatically, while users are prompted to choose whether to activate the second.

2. Updates to OneIdP 

  1. Introducing Grid-based MFA in OneIdP Keycard 

You can now give users a faster way to authenticate on shared desktops and servers without compromising security on work laptops.

With Grid-Based MFA, users can configure a Grid Pattern and PIN for subsequent online and offline logins, while you decide where this authentication method should be used.

What you can do:

  • Enable Grid-Based MFA: Let users authenticate using a Grid Pattern and PIN for faster online and offline logins.

  • Apply it only where it makes sense: Restrict Grid-Based MFA to desktop and server devices, while continuing to enforce modern MFA methods on employee laptops.

  • Deliver a better shared device experience: Reduce authentication friction for users who frequently access shared or kiosk-style devices without weakening your overall security posture.

  1. Keycard Enhancements

You can now apply Keycard and MFA policies independently for different operating systems, giving you greater control over authentication in mixed-device environments.

What you can do:

  • Choose where Keycard is enabled
     Apply Keycard to specific platforms, such as Windows or macOS, while excluding others within the same user group.

  • Configure MFA by platform
     Enforce MFA only on the operating systems that require it, without affecting users on other platforms.

  • Tailor authentication to your environment
     Use a single user group while applying authentication policies that match the security requirements of each device platform.

  1. Custom scopes for OIDC/OAuth 

Now customize the claims passed to your OIDC/OAuth applications, giving you greater control over the identity information shared during authentication.

In addition to defining custom claims, you can also control when they're sent based on a user's group membership.

With this update, you can:

  • Create custom claims
     Define custom scopes, claim names, and claim values for your OIDC/OAuth applications.

  • Send claims conditionally
     Configure claims to be included only for users belonging to selected groups.

  • Customize supported default claims
     Override values for the following default scopes and claims:

    • openid → sid

    • email → email

    • profile → username, given_name, family_name

    • phone → phone

  • Build more flexible identity integrations
     Tailor the information your applications receive to support different authentication and authorization scenarios.

3. What’s new in Windows: 

  1. Windows Application Management Enhancement

Reset the download and installation retry counter for Enterprise Store and Scalefusion applications using a dedicated Remote Command.

  • Retry failed app deployments: Reset the download and installation retry counter for Enterprise Store and Scalefusion applications without requiring additional troubleshooting.

  • Restore deployment attempts quickly: Trigger a fresh installation attempt when an app has reached its retry limit.

  1. More Comprehensive CIS Level 1 Compliance for Windows

Your Windows compliance assessments now cover 350+ CIS Level 1 benchmark rules, enabling significantly more comprehensive compliance measurement across your Windows inventory.

  • With the expanded rule set, Remediate must now be explicitly enabled on a per-rule basis, ensuring you understand the impact of each change before it's applied.

  • In addition to Monitor and Remediate, you can now Revert/Rollback changes once a compliance profile is unpublished.

Note: Rollback is a best-effort operation and is not guaranteed in all scenarios.

4. Remote Control for Android Version 2.0

Remote Support for Android has been reimagined. Remote Control for Android Version 2.0 is now live and available to all customers as part of a phased rollout.

We've rebuilt the entire Remote Support stack, including the backend, Dashboard, and Android app, to deliver a faster, more reliable, and more collaborative remote support experience.

  • Multi-admin sessions: Invite up to 5 additional admins to an ongoing remote support session when multiple team members need to troubleshoot the same device.

  • Stay connected, even on unstable networks: Adaptive connectivity automatically adjusts the session resolution based on network speed and attempts to reconnect for up to 15 seconds if the connection drops.

  • Guide users visually: Annotate directly on the remote screen. Annotations are visible to every admin participating in the session, making collaboration easier.

  • Start talking instantly: Voice calls are now enabled by default when a remote support session starts. Simply unmute and start talking.

  • Get richer session insights: Session reports now include bandwidth usage, total participant count, and other session-level details to help you better understand every support session.

Note: 

  • File transfers larger than 100 MB may experience packet drops.

  • Remote Control for Android Version 2.0 is currently limited to a maximum of 20 devices per account as part of the phased rollout. If you'd like this limitation relaxed for your account, please reach out to the Scalefusion Support team.

5. More updates to mobile device management 

  1. Faster Login for Shared Android Devices

Sharing corporate-owned Android devices just got easier. Users can now sign in to shared COD devices using a PIN, making repeat logins faster while continuing to support offline access.

  • Users create their PIN during their first online sign-in

  • The same PIN can be used for all subsequent logins, including offline device access. 

  • PIN can be updated at any time after signing in.

To enable this experience, navigate to User Group → Settings → Shared Device Settings and turn on Allow users to sign in when device is offline.

Note: If a user forgets their PIN, they'll need to sign in online again to configure a new one.

  1. Auto-Grant Runtime Permissions for QR-Based BYOD Enrollment

Skip a few more taps during BYOD enrollment.

  • Runtime permissions can now be automatically granted during QR code-based BYOD enrollment.

  • Previously available only for email-based BYOD enrollment, this capability now works across both enrollment methods.

  • Reduce user interaction and speed up the enrollment experience.

  1. More Reliable Factory Reset Delivery

Ensure devices are securely wiped without having to resend the command.

  • Factory Reset commands are now retained until the device receives them.

  • Devices that come back online after an extended period of inactivity will still be factory reset as originally intended.

6. What’s new with FileDock

FileDock now gives you more control over presentations while making documents easier to access.

  • Take control of presentations: Set the default presentation interval to 0 to let users manually switch between images and videos.

  • View PDFs without leaving FileDock: Open PDF files directly within FileDock—no additional PDF viewer required.

  • Improved presentation reliability: Fixed an issue that prevented presentations from launching as a screensaver on certain TCL devices.

7. Custom Enrollment Keys for Device Groups

Device Group Enrollment Keys no longer have to be system-generated. You can now create and update custom enrollment keys, making them easier to remember, share, and manage for device enrollment and post-enrollment group switching.

You can configure custom enrollment keys through:

  • Bulk Enrollment Key update

  • CSV-based group creation

  • Device Group creation from the Dashboard

  • Device Group creation using the API

8. Enhancements & Bug Fixes

  • Enable System Apps remotely: Re-enable system apps that were disabled during COD enrollment using a new Remote Command.

  • New configuration flag for proxied networks: Enable a new configuration flag in COD and COPE enrollment QR codes to let Scalefusion detect proxied network environments and handle enrollment and subsequent network calls accordingly.

  • Simplified device management: Removed the option to remove device subscriptions from the Scalefusion Settings screen.

  • Improved Wi-Fi discovery: All available SSIDs are now displayed on the Scalefusion Wi-Fi screen.

  • Reliable location updates with private APNs: Location updates now work correctly on devices configured with a private APN.

  • Improved Wi-Fi connectivity: Configured Wi-Fi networks now connect automatically as expected.

  • Easier navigation: Added pagination to Sub-group listings.

  • Expanded Wi-Fi security support: Basic Wi-Fi configuration now supports all Wi-Fi security types.