Multi-user mode

Relution and Apple each offer their own multi-user mode.

Relution Shared Device and Apple Shared iPad.

Both modes bring different features.

Relution Shared Device →

Defined requirements to support decision-making. #

Defining the requirements for devices in multi-user mode makes it easier to decide on one of the two solutions. The following points provide guidance:

• GDPR-compliant work
• Availability of Apple Classroom for teachers
• Simple log in without user name and password
• Low available bandwidth
• No users and/or classes created in Relution
• Shortest possible login times
• Use of system apps necessary
• Use of personal drives
• Use of Relution Teacher

Comparison of requirements #

The requirements are only partially supported by both modes:

With Relution Shared Device, login without username and password is done via QR code containing a personal access token. This requires the option Allow login with access tokens (QR codes) in the Relution Shared Device configuration, see Relution Shared Device →.

With Relution Shared Device, login time and bandwidth usage depend on how many apps are installed at login. If the option Disable user specific automatic app installations is enabled, the apps assigned via auto deployment are not installed at login, which speeds up switching users.

Relution Teacher identifies student devices by the user assigned to the device in Relution. On Apple Shared iPad, when someone logs in with a Managed Apple Account (Managed Apple ID in the portal), Relution automatically assigns the Relution user for whom this account is stored. In a guest session, the user assignment is removed instead. If the option Block automatic Relution user update is enabled in the Shared iPad settings configuration, no automatic assignment takes place.

Guest mode #

If the fastest possible log in time is required and little bandwidth is available, Apple Shared iPad is suitable. It allows logging in in the so-called Guest Mode, which ensures anonymous use. As a guest, however, the devices are not displayed as online in Apple Classroom. To work in a GDPR-compliant manner and use Apple Classroom, Apple’s multi-user mode is out of the question. With the Relution Shared Device mode, this combination is possible.

System apps #

Since Relution can only delete temporary data and content from apps by uninstalling them from devices, it is not recommended to use system apps that store data. For example, the Safari browser is one such system app. It cannot be uninstalled, which means that content and open tabs of previous users are still available and can be viewed when a user changes. To get around this problem, alternative apps can be used, such as the Firefox browser, which can be deleted from the device.

Which apps are deleted at logout is defined in the Relution Shared Device configuration under On logout, delete the following apps. By default, Only those apps which have been installed at login (Auto Deployment) is selected. Apps that are defined as required apps in a policy remain on the device. An alternative app such as Firefox is therefore either distributed exclusively via auto deployment, or the option All managed apps, including those that were installed as required Apps through a policy is selected.

Photos #

When it comes to photos, the native camera should also be disabled on iOS devices. Otherwise, created pictures are automatically saved in the system app Photos, which cannot be deleted either. Thus, created photos cannot be removed by Relution. Alternatively, Relution Camera offers the option to save created photos not on the devices, but on a configured network drive.

Microsoft applications #

When using Microsoft apps such as Teams or Excel, the following special feature must be taken into account:

If devices are operated in Relution Shared Device mode and users do not log out of these apps, the log ins are stored in the digital keychain of the devices and cannot be removed by uninstalling them. Users need to be made aware that logging out of these apps is mandatory. Alternatively, Apple Shared iPad can be used.

Setup #

Relution Shared Device is activated via the configuration of the same name in a policy, see Relution Shared Device →.

Apple Shared iPad is activated via Automated Device Enrollment (ADE, DEP in the portal) with the option Activate “Shared iPad” in the enrollment profile, see Profile for ADE →. The setting is applied during enrollment and can only be changed afterwards by resetting the device. Further settings for Shared iPads, such as Temporary session only, Temporary session timeout (in seconds), User session timeout (in seconds), Quota size per user (in megabytes), Number of users and Block automatic Relution user update, are defined in the Shared iPad settings configuration in a policy, see Shared iPad settings →.

Combination of both multi-user modes #

It is possible to activate Relution Shared Device and Apple Shared iPad at the same time. The combination combines the advantages of both solutions. Through the Apple Guest Mode system apps can be used without leaving any data on the devices. At the same time, students log in via the Relution Agent, and teachers can use Relution Teacher to apply lesson templates with relevant apps and features to student devices, see Teacher →.

On Shared iPads, Relution does not delete any apps at logout, regardless of the setting On logout, delete the following apps. The iPad itself removes the data of a guest session at logout. The option Lock device to enforce login has no effect on Shared iPads.