StagingComplete is a lightweight utility designed for Workspace ONE environments to streamline the final step of staging iOS devices. It enables third-party staging teams to complete device setup and move devices into their final organization group (OG) using MDM-managed app configuration and REST APIs.
This app is ideal for use in staging org groups where restrictions like Single App Mode or Kiosk Lockdown should not be applied until device prep is fully complete.
- Finalize setup after 3rd-party staging (COPE or BYOD)
- Dynamically reassign devices to their production OG
- Avoid applying restrictions too early in the device staging lifecycle
- Repair network profiles before OG transition (optional)
- Accepts all config data via MDM app configuration
- No hardcoded environment or OG values
- All config values passed via Managed App Config:
staging_og_idproduction_og_iddevice_serial_numberauth_tokenorstaging_accountairwatch_server_url
- Moves device from staging OG to production OG
- Uses Workspace ONE REST API with pre-populated credentials
- Logs success/failure via console/debug view
- Optional Wi-Fi profile re-installation
- Uses SimplePing and X509 checks to validate and repair network payload
- Ideal for certificate-based Wi-Fi environments
- Final OG can enforce Single App Mode or restrictions
- App ensures all permissions are granted before the switch
- iOS 13+
- Workspace ONE UEM (REST API enabled)
- Scoped to staging org group via MDM
- Deploy the app to your staging OG with MDM-managed config
- Pre-populate necessary config values
- Ensure network profile is assigned to staging OG
- Upon staging completion, press the "Lock Device" button to:
- Move device to its final destination
- Trigger all downstream policies (restrictions, kiosk, etc.)
MIT
Staging is done. Lock it down.