https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/Recent content in Shared iPad onHugo -- gohugo.ioen-USTue, 30 Jun 2026 00:00:00 -0700https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/set_up_a_shared_ipad/Tue, 30 Jun 2026 00:00:00 -0700https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/set_up_a_shared_ipad/This page takes a blank enrolled iPad to a working shared device with Microsoft sign-in, the default for most teams. By the end, a person can walk up, tap their badge, reach the home screen, and open Teams or Outlook without a second login. Most teams connect Microsoft sign-in so Teams, Outlook, and My Apps open as the same person, and it’s included in the steps below. If your users never open Microsoft apps, skip the steps marked Microsoft and leave the use_msal and azure_client_id lines out of the payload in Step 4.https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/what_users_see/Tue, 30 Jun 2026 00:00:00 -0700https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/what_users_see/This page walks through what a person sees on a finished shared iPad, from the first tap to handing it on. It’s here so you can glance at a device and tell it’s working before you give it to staff or a help desk. You don’t need to read it to set anything up. The home screen, before sign-in # A healthy iPad opens IDmelon Authenticator into the shared sign-in screen, not the normal personal app.https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/configuration_keys/Tue, 30 Jun 2026 00:00:00 -0700https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/configuration_keys/Set every key in the Apple managed namespace (com.apple.configuration.managed) — the XML you paste in Intune. Required # api_key — turns the app into a shared device; its presence is the switch. String · Default: none · a Shared Mobile secret from the IDmelon Admin Panel base_api_url — points the app at your on-premise IDmelon instead of the cloud. String · Default: absent (uses the cloud) · an https URLhttps://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/login_methods/Tue, 30 Jun 2026 00:00:00 -0700https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/login_methods/shared_login_method picks how a person signs in: by badge or by face. For the key’s type, values, and default, see Configuration keys. Default is badge / hub, also the fallback when the value is missing or unparseable. Badge models # hub No local reader; badge IDs arrive over the IDmelon Hub relay. Default and fallback. auto Accepts any badge source — smart-card reader, keystroke reader, or hub. keystroke Keyboard-wedge / HID-keyboard reader.https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/customization/Tue, 30 Jun 2026 00:00:00 -0700https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/customization/All optional. Add the blocks you want to the managed app config you push from Intune. For type, allowed values, and default of every key, see Configuration keys. Shortcut tiles # shortcut_list adds tiles to the home screen. Each tile is a dict with three keys: title — label under the tile. url — where it opens; accepts the tokens below. iconName — remote icon, fetched as <name>.png from your image host; unresolved name = no icon.https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/microsoft_sign_in_options/Tue, 30 Jun 2026 00:00:00 -0700https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/microsoft_sign_in_options/Advanced Microsoft sign-in keys. Most teams never touch them. The standard Set up a shared iPad flow covers a normal Entra tenant. For the type, allowed values, and default of every key, see Reference → Configuration keys (the canonical value). use_msal # Turns on Microsoft Entra (MSAL) login. The setup page sets use_msal and azure_client_id (the two keys MSAL needs). Lock sign-in to one tenant # azure_tenant_id is optional. Absent = common.https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/advanced_security/Tue, 30 Jun 2026 00:00:00 -0700https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/advanced_security/Three optional keys. Most deployments leave them alone. Test on one device first. For the canonical type and default of each, see Configuration keys. Passkeys on the shared iPad # shared_device_passkeys turns on passkey (FIDO2) mode. Use it only if your sign-in target expects passkeys. <key>shared_device_passkeys</key> <true/> Requires iPadOS 17 or later. No effect on older iPads. One-time-use passkeys # one_time_use_passkeys spends each passkey after one sign-in. Only takes effect when shared_device_passkeys is also on.https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/troubleshooting/Tue, 30 Jun 2026 00:00:00 -0700https://docs.idmelon.com/docs/for_administrators/shared_devices/shared_ipad/troubleshooting/Find your symptom, apply the fix. Each assumes you already pushed a managed app configuration from Intune and synced the device. The app didn’t switch to shared mode # IDmelon Authenticator opens the normal personal screen, not the shared sign-in screen. Cause: no api_key. Reading that key is the switch; there is no separate toggle. Fix: Set api_key to a Shared Mobile key from the IDmelon Admin Panel. Spell it exactly api_key, all lowercase.