What is Device Entitlement?
Device entitlement allows administrators to define a list of Active Directory domains that user devices need to be connected to in order to use the Desktop App. This mechanism ensures that only authorized devices joined to known domains and with pre-defined UPN suffixes can use the application.
Use Case and Benefits
The primary use case for device entitlement is to control and secure the deployment of the Desktop App. By restricting access to known domains and authorized UPN suffixes, administrators can:
- Enhance security by ensuring only authorized devices can sync or connect to the cloud using the app.
- Prevent unauthorized access and potential data breaches.
- Simplify management by automatically notifying users if their device is not authorized, and removing access to the Egnyte domain from unauthorized devices.
If a user’s UPN suffix is not entitled to using this mechanism, they will see a message informing them they are not authorized or permitted to sync or connect to the cloud using the app. This message will persist until the device becomes an authorized domain user with an authorized UPN suffix or if the list of authorized suffixes is updated in the cloud.
What Plans Include It?
Device entitlement is available for all plans.
Enable Device Entitlement For The Desktop App
To enable device entitlement, follow these steps:
- Log in to the Egnyte website in your browser.
- Navigate to Settings -> Configuration -> Applications -> Desktop section -> Desktop Device Entitlement.
- Enter a list of all possible UPN suffixes for which app usage should be allowed (e.g., acme.com, acme.co.uk)
Turning on device entitlement will affect the Desktop App.
How to find the UPN suffix the machine is connected to?
To find the UPN suffix or AD domain name the machine is connected to, use the following commands:
On Mac
Run the following command in a Terminal window and look for the domain name near the top of the output:
dsconfigad --show
On Windows
Run the following command in a command prompt, while logged in as the given user and check the UPN suffix (ie. the domain portion of the UPN after the '@' character):
whoami /upn
Device Entitlement On Other Clients
Device entitlement is also available on Egnyte's mobile clients.