1) Custom Declarations for iOS & macOS

As Apple moves toward Declarative Device Management, you can now use Custom Declarations in Scalefusion to send custom declarations to your iOS and macOS devices, similar to Custom Payloads.

Deploy Apple DDM declarations directly from Scalefusion to iOS, iPadOS and macOS devices with corresponding JSON payloads. Configure Apple capabilities that may not have a dedicated setting in Scalefusion, without needing to manage those declarations separately.

  • Deploy custom DDM payloads: Enter or import a valid JSON payload for an Apple DDM declaration.

  • Support iOS/iPadOS and macOS: Deploy declarations across supported Apple platforms.

  • Choose the DDM channel: Apply declarations at the System or User level, depending on platform support.

  • Define declaration type: Specify the Apple-defined DDM declaration type identifier required for the configuration.

  • Set conflict resolution: Choose whether the custom payload or existing device profile settings take precedence over the other. 

  • Validate JSON: Validate the payload and identify errors before deployment.

  • Use device and user properties: Insert supported device- and user-specific variables into Value/Data fields.

  • Import JSON files: Upload a .json file directly into the payload editor.

  • Manage configuration lifecycle: Configure the declaration to be updated, relaxed or removed through existing policies. 

  • Monitor and manage deployment: Track DDM request status and manage declarations through existing policy workflows.

  • Maintain audit visibility: Support audit logs and Maker Checker for managed configuration activity

2) Handle certificate chains with Veltar VPN Server

Veltar VPN Server now supports certificate chains, so you can provide the complete chain instead of relying only on the root certificate. This gives you greater flexibility when configuring certificate-based VPN connections.

3) Updates to OneIdP 

  1. Give service providers visibility into authentication strength

OneIdP now supports ACR/AMR in SAML assertions. Service providers can use this information to determine the authentication strength provided by OneIdP and decide whether to allow or reject a login.

  1. Make Grid Patterns more secure

Grid Pattern configurations now enforce complexity rules by default. Users must choose characters from 3 different rows and 3 different columns, helping prevent simpler patterns.

4) Keep terminology consistent with Apple

You'll now see modern Apple naming conventions across the Console, including ADE and Account Driven User Enrollment.

5) Bug Fixes

  • VPP Token status: Valid VPP Tokens are no longer incorrectly marked as expired.

  • Group-Based App Configurations: Android devices now receive Group-Based App Configurations correctly during enrollment.