Jamf Pro 9.5 or later allows you to distribute managed apps to mobile devices with iOS 7 or later even when the App Store is restricted on the devices. This allows you to restrict the apps that can be installed on devices to only those apps included in the Mobile Device App Catalog in Jamf Pro.
Specifically, if the App Store is restricted using an iOS configuration profile with the Allow installing apps checkbox deselected in the Restrictions payload, Jamf Pro automatically removes/re-applies the restriction on a device whenever a managed app is distributed to the device. The action of removing/re-applying the App Store restriction is used with either of the two app distribution methods: install the app automatically/prompt users to install the app, or make the app available in Self Service.
To implement this functionality after upgrading to Jamf Pro 9.5, you need to redistribute any existing iOS configuration profiles that have the Allow installing apps checkbox (deselected in the Restrictions payload. This process is necessary regardless of whether the profile contains only a single Restrictions payload or multiple payloads.
This article explains how to redistribute iOS configuration profiles using Jamf Pro.
Jamf Pro 9.5 or later
The edited profile is redistributed to mobile devices in the scope the next time they contact Jamf Pro. Thereafter, Jamf Pro automatically removes/re-applies the App Store restriction on a device whenever a managed app is distributed to the device.
For information on best practices for payload management and planning, see the Knowledge Base article Optimizing Configuration Profile Payload Management.
Jamf wants to hear your feedback around Jamf Pro: LDAP Servers and Reports!