Add option to disable sign in providers (Apple, Google, E-Mail) using Apple Mobile Device Management (MDM)

[nilsreichardt]

Background

Some students have an iPad that is controlled by the school. They ask the IT admin if Sharezone can be allowed (only the students are using Sharezone, not the school). However, for privacy reasons, IT admins may want to disable Google and Apple sign-in.

I did a little research and it might be possible to allow IT admins to set some flags in MDM so that the login options are disabled for the managed iPads.

Example

if let appConfig = UserDefaults.standard.dictionary(forKey: "com.yourcompany.yourapp") {
    if let disableGoogleSignIn = appConfig["disableGoogleSignIn"] as? Bool, disableGoogleSignIn {
        // Disable Google Sign-In in your app
    }

    if let disableFacebookSignIn = appConfig["disableFacebookSignIn"] as? Bool, disableFacebookSignIn {
        // Disable Facebook Sign-In in your app
    }
}

⚠️ I only did very short research. It could be that it's not possible to configure it like that.

Resources

• https://chatgpt.com/share/91128701-92bb-4dae-bdc4-5be936bea088
• https://developer.apple.com/documentation/devicemanagement
• https://forums.developer.apple.com/forums/thread/672938

[EvilMonkey09]

I think the real problem for the IT-Admins are the google apis that Sharezone is using. If they allow network access to the google APIs inside the network, the risk is that other applications might be able to access their servers too, even if not wanted by the school.