Configure the mobile app

GA with allowlist: Access to the Gemini Enterprise mobile app is available to select Google Cloud customers. To find out more or to sign up to use this feature, contact your Google Cloud sales representative.

This page explains how to configure the Gemini Enterprise mobile app on devices managed by a mobile device management (MDM) solution, such as Google Endpoint Management (GEM) or Microsoft Intune.

Overview

As a Gemini Enterprise administrator, you can configure the mobile app for users with one of two methods:

• You can use a Mobile Device Management (MDM) solution to remotely install and configure the app on users' devices.

• You can generate an access link and distribute it to users, which lets them configure the app by opening the link on their mobile devices.

The following sections describe the steps required by each method.

Before you begin

Before you configure the app for users, set up an identity provider for your Gemini Enterprise organization. The Gemini Enterprise mobile app supports the use of Google Identity and Microsoft Entra ID.

Google Identity

Confirm that your Gemini Enterprise instance is configured to use Google Identity. For more details, see Configure identity provider.

Microsoft Entra ID

If your organization uses Microsoft Entra ID, update your client configuration as follows:

1. Navigate to App registrations in the Entra administrator center, and select your application.
2. Select Add Redirect URI then choose Mobile and desktop applications.
3. Enter the redirect URI, https://vertexaisearch.cloud.google.com/m/oauth-redirect, and click Configure.
4. In the Settings tab, enable ID tokens, which are used for implicit and hybrid flows.

Use a Mobile Device Management (MDM) solution

The Gemini Enterprise administrator panel provides an app URL that contains the parameters required to configure the mobile app in your MDM solution. These parameters map directly to AppConfig parameters in the AppConfig standard and can be used to preconfigure the app, and enforce security policies.

Note: Only OIDC (OpenID Connect) authorization is supported. SAML isn't supported.

The following steps use Google Endpoint Management (GEM) as an example of configuring an MDM, but the AppConfig parameters should be applicable to other MDM solutions. These steps require access to your MDM administrator console. If you do not have access, contact your organization administrator for next steps.

To configure the app for users in the GEM MDM management solution:

1. In the Google Cloud console, go to the AI Applications page.

   Go to AI Applications

   1. Click your app. The Overview page displays.

      Note: If the link isn't visible, your project might not be on the allowlist for Private GA.

   2. Click Copy URL to copy the mobile link. You can then distribute the link to users. The format of the mobile link differs based on your identity provider.

      Google Identity

      If your Gemini Enterprise uses Google as an identity provider, the mobile app URL looks like this:

         https://vertexaisearch.cloud.google.com/mobile?cid=123&cid_location=global
      

      Microsoft Entra ID

      If your Gemini Enterprise uses Microsoft Entra ID as an identity provider, the mobile app URL looks like this:

         https://vertexaisearch.cloud.google.com/mobile?cid=123
         &cid_location=global
         &idp=locations/global/workforcePools/PROJECT/providers/entra
         &tenant_id=111
         &client_id=222
         &project_id=ge-project
      

   3. Extract the parameters from the app URL, and use them to fill in the app configuration in your MDM administrator console:

      Google Identity

      Deeplink parameter	MDM configuration key	MDM configuration name	Example value
      cid	config_id	Configuration ID	123
      cid_location	location	Location	global

      Leave all other fields empty.

      Note: When you configure the Android app in Google Endpoint Management (GEM), use the MDM configuration name in the managed configuration form. However, for iOS, manually enter the MDM configuration key with its corresponding value.
      
      For example, the following XML configures an iOS application in GEM:

      <dict>
         <key>config_id</key>
         <string>123</string>
         <key>location</key>
         <string>global</string>
      </dict>
      

      Microsoft Entra ID

      Deeplink parameter	MDM configuration key	MDM configuration name	Example value
      cid	config_id	Configuration ID	123
      cid_location	location	Location	global
      idp	identity_provider	Identity Provider	locations/global/workforcePools/PROJECT/providers/entra
      tenant_id	tenant_id	Entra tenant ID	111
      client_id	client_id	Entra client ID	222
      project_id	project_id	Project ID	ge-project

Generate an access link

To generate the access link for distribution to Gemini Enterprise mobile app users, do the following:

1. In the Google Cloud console, go to the AI Applications page.

   Go to AI Applications

2. Click your app. The Overview page displays.

   Note: If the link isn't visible, your project might not be on the allowlist for Private GA.

3. Click Copy URL to copy the mobile link. You can then distribute the link to users. The format of the mobile link differs based on your identity provider.

   Google Identity

   If your Gemini Enterprise uses Google as an identity provider, the mobile app URL looks like this:

       https://vertexaisearch.cloud.google.com/mobile?cid=123&cid_location=global
   

   Microsoft Entra ID

   If your Gemini Enterprise uses Microsoft Entra ID as an identity provider, the mobile app URL looks like this:

       https://vertexaisearch.cloud.google.com/mobile?cid=123
       &cid_location=global
       &idp=locations/global/workforcePools/PROJECT/providers/entra
       &tenant_id=111
       &client_id=222
       &project_id=ge-project