Configure the mobile app

This page explains how to configure the Gemini Enterprise mobile app on user devices. Gemini Enterprise app administrator can choose to configure access for users using one of three available methods.

Overview

As a Gemini Enterprise administrator, you can configure the mobile app for users with one of three methods:

• You can use a Mobile Device Management (MDM) solution to remotely install and configure the app on user devices. MDM solutions allow admins to complete set up steps prior to delivering apps to users.

• You can enable a QR code within the Gemini Enterprise web app. Users can then configure the mobile app by scanning this QR code. QR codes can simplify the distribution of access to users and can be used in addition to MDM solutions.

• You can generate an access link and distribute it to users, which lets them configure the app by opening the link on their mobile devices.

Note: MDM configuration overrides all other configuration methods. If you have configured an MDM solution on a device, it takes priority and overrides any attempt by a user to configure the app using a QR code or an access link. In this case, the app displays a message indicating that the configuration is managed.

The following sections describe the steps required by each method.

Before you begin

Before you configure the app for users, set up an identity provider for your Gemini Enterprise organization. The Gemini Enterprise mobile app supports the use of Google Identity and third-party identity providers. For more information, see Configure identity provider.

Note: Signing in with multiple identity providers on a single device can cause authentication conflicts, resulting in an "Incomplete sign-in details" error. If a user encounters this message, they can resolve it by signing out and signing in again.

Use a Mobile Device Management (MDM) solution

The Gemini Enterprise administrator panel provides an app URL that contains the parameters required to configure the mobile app in your MDM solution. These parameters map directly to AppConfig parameters in the AppConfig standard and can be used to configure the app, and enforce security policies.

The following steps use Google Endpoint Management (GEM) as an example of configuring an MDM, but the AppConfig parameters should be applicable to other MDM solutions. These steps require access to your MDM administrator console. If you don't have access, contact your organization administrator for next steps.

To configure the app for users in the GEM MDM management solution:

1. In the Google Cloud console, go to the Gemini Enterprise page.

   Go to AI Applications

2. Click your app. The Overview page displays.

3. Click Copy URL to copy the mobile link. The format of the mobile link differs based on your identity provider.

   Google Identity

   If your Gemini Enterprise app uses Google as an identity provider, the mobile app URL looks like this:

   https://vertexaisearch.cloud.google.com/mobile?cid=123&cid_location=global
   

   Third-party identity provider

   If your Gemini Enterprise app uses a third-party identity provider, the mobile app URL looks like this:

   https://vertexaisearch.cloud.google.com/mobile?cid=123&cid_location=global&idp=locations/global/workforcePools/my-pool/providers/my-provider
   

4. Extract the parameters from the app URL, and use them to fill in the app configuration in your MDM administrator console:

   Google Identity

   Deeplink parameter	MDM configuration key	MDM configuration name	Example value
   cid	config_id	Configuration ID	123
   cid_location	location	Location	global

   Leave all other fields empty.

   Note: When you configure the Android app in Google Endpoint Management (GEM), use the MDM configuration name in the managed configuration form. However, for iOS, manually enter the MDM configuration key with its corresponding value.

   For example, the following XML configures an iOS application in GEM:

   <dict>
      <key>config_id</key>
      <string>123</string>
      <key>location</key>
      <string>global</string>
   </dict>
   

   Third-party identity provider

   Deeplink parameter	MDM configuration key	MDM configuration name	Example value
   cid	config_id	Configuration ID	123
   cid_location	location	Location	global
   idp	identity_provider	Identity Provider	locations/global/workforcePools/my-pool/providers/my-provider
   tenant_id	tenant_id	Tenant ID (Deprecated, leave empty)
   client_id	client_id	Client ID (Deprecated, leave empty)
   project_id	project_id	Project ID (Deprecated, leave empty)

Enable a QR code on the web app homepage

As a Gemini Enterprise administrator, you can display a QR code on the web app homepage, which allows users to configure the mobile app on their devices by scanning the QR code using their device's camera. This serves as a simpler way to distribute the access link to users.

To manage the configuration QR code visibility:

1. In the Google Cloud console, go to the Gemini Enterprise page.

   Gemini Enterprise

2. Click the name of the app that you want to configure.

3. Click Configurations and then click the Feature Management tab.

4. Turn on or turn off the Enable QR code login toggle to display or hide the QR code on the app user's home page.

After the QR code is enabled, users can scan the QR code displayed on their Gemini Enterprise web app using their mobile device to configure and connect the mobile app.

Note: If MDM is configured on the user's device, the MDM configuration overrides the QR code setup and displays a message indicating that the configuration is managed.

To view the QR code on the web app to set up the mobile app:

1. Open your Gemini Enterprise web app.
2. Click Settings & help.
3. Click Mobile login.
4. Scan the QR code with your mobile device to sign in to the Gemini Enterprise mobile app.

Generate an access link

To generate the access link for distribution to Gemini Enterprise mobile app users, do the following:

1. In the Google Cloud console, go to the Gemini Enterprise page.

   Go to AI Applications

2. Click your app. The Overview page displays.

3. Click Copy URL to copy the mobile link. You can then distribute the link to users. The format of the mobile link differs based on your identity provider.

   Google Identity

   If your Gemini Enterprise uses Google as an identity provider, the mobile app URL looks like this:

   https://vertexaisearch.cloud.google.com/mobile?cid=123&cid_location=global
   

   Third-party identity provider

   If your Gemini Enterprise uses a third-party identity provider, the mobile app URL looks like this:

   https://vertexaisearch.cloud.google.com/mobile?cid=123&cid_location=global&idp=locations/global/workforcePools/my-pool/providers/my-provider
   

Note: If MDM is configured on the user's device, the MDM configuration overrides the access link setup and displays a message indicating that the configuration is managed.