Login configuration

Single sign-on uses a third-party SAML 2.0 SSO identity provider to authenticate users based on their company SSO credentials. When users start the app, they are temporarily directed to their company's internal SSO sign-in page. Once verified, the user is then redirected back to the app and signed in.

Once authenticated, the user remains signed in until the server determines the user needs to reauthenticate. The determination is based on the SSO settings below. If the reauthentication fails, the user is signed out, and the app data are wiped from the device.

For more information, see Mobile application security.

SSO Login

Turns on SSO sign-in for this company.

Enable Medallia Mobile 3

Enables users to sign in to Medallia Mobile version 3 on your Experience Cloud instance. When this is turned on, users signing in through version 2 are prompted to upgrade to version 3.

Enable Medallia Mobile Android Direct Download

China blocks access to the Google Play Store. If your company needs to deploy the Android version of Medallia Mobile in China, turn on this property to activate a QR code on the Medallia Mobile promotional screen. For more information, see Medallia Mobile.

Enable Voices 2

When selected, users may sign in through Medallia Voices version 2.

Navigation experience

To configure tab navigation and display Mobile dashboards or Web dashboards, select Mobile, Web, or Hybrid. Select Mobile to access a subset of the same reports available to the user on Medallia Web reporting. Select Web to access Medallia Web reporting. This option is an exact copy of Medallia Web reporting. The Hybrid option combines both navigation modes.

Security & Biometrics

PIN/Touch ID is a secondary layer of security that optionally allows users to use their device PIN or fingerprint scan to re-access the app after some period of inactivity. This test happens when the user switches back to the app after it has been in the background. If the PIN or scan fails three times, the user must reauthenticate using one of the techniques just described.

Additionally:

• The PIN is a number at least 4 digits in length.
• Fingerprint ID is only available on devices capable of scanning the fingerprint.
• The PIN or fingerprint scan is stored in a secure keychain on the device, and is never sent to Medallia servers.
• The PIN/Touch ID is set per device. Users with multiple devices must create an ID on each device. When multiple users share the same device, they must use a shared PIN; they cannot use fingerprint scan.

For more information, see Mobile application security.

PIN/TouchID security

When to use PIN/Touch ID for reverification. The options are:

• Disabled — PIN/Touch ID is not available to users; default re-authentication techniques are used instead.
• Optional — The user is prompted to create a PIN/Touch ID after logging; but, the user has the option to "skip" and not use the feature.
• Required — User are prompted to create a PIN/Touch ID before they can use the app.

Minutes before PIN/TouchID authentication

Minutes of inactivity before prompting the user to reverify with PIN or Touch ID. Set this value to zero (0) to force the user to provide a PIN or Touch ID when the app comes to the foreground.

Disable external links

When on, the Share Your Feedback and Get Help links in mobile applications are disabled.

Allow text selection

By default, users cannot copy text in mobile applications. To allow copying, turn this property on.

Enterprise Email Setup

By default, when a user forwards email in Medallia Mobile and Medallia Voices, the user's mobile device uses the native email client defined for that device. If your company wants to specify a non-default email client, configure properties in the Enterprise Email Setup sections (for iOS and Android devices). Medallia mobile applications support the following email clients.

• BlackBerry
• Boxer
• Citrix
• Gmail
• MobileIron
• Outlook

Alternatively, you can configure a non-default email client as part of your AppConfig configuration. For more information, see Mobile application security.

Enable configuration through platform

Turn on to enable a non-default email client for Medallia Mobile and Medallia Voices. This property must be on for the remaining properties to take effect.

Note: The mailto protocol does not support attachments. The body of emails using mailto are sent as Plain text.

Mail Scheme URL

URI that instructs the device to open a specific mail client.

Email client	iOS	Android
BlackBerry	gwmailto: Note: To enable mailto links for BlackBerry, you must turn on the Allow 3rd Party App to Send Mail setting in your BlackBerry Work app configuration.	mailto: or gwmailto:
Boxer	awemailclient://emailcompose Note: To enable mailto links for Boxer, you must turn on the Enable composing email property on the Groups & Settings > All Settings > Apps > Settings and Policies > Security Policies screen in Boxer.	awemailclient://emailcompose?kAWEmailClientEmailTo=
Citrix	ctxmail://	mailto:
Gmail	googlegmail://co	mailto:
MobileIron	email+launcher://mibrowser?url=mailto:	mailto:
Outlook	ms-outlook://compose	ms-outlook://emails/new
Other clients that support the mailto protocol	mailto:	mailto:

Mail Recipient Name

Sets the parameter name of the email recipient for the email client.

Email client	iOS and Android
BlackBerry	Empty
Boxer	kAWEmailClientEmailTo
Citrix	Empty
Gmail	to
MobileIron	to
Outlook	to
Other clients that support the mailto protocol	to

Bcc Parameter Name

Sets the BCC parameter name for the email client.

Email client	iOS and Android
BlackBerry	bcc
Boxer	kAWEmailClientEmailBCC
Citrix	bcc
Gmail	bcc
MobileIron	bcc
Outlook	bcc
Other clients that support the mailto protocol	bcc

Cc Parameter Name

Sets the CC parameter name for the email client.

Email client	iOS and Android
BlackBerry	cc
Boxer	kAWEmailClientEmailCC
Citrix	cc
Gmail	cc
MobileIron	cc
Outlook	cc
Other clients that support the mailto protocol	cc

Subject Parameter Name

Sets the subject parameter name for the email client.

Email client	iOS and Android
BlackBerry	subject
Boxer	kAWEmailClientEmailSubject
Citrix	subject
Gmail	subject
MobileIron	subject
Outlook	subject
Other clients that support the mailto protocol	subject

Body Parameter Name

Sets the body parameter name for the email client.

Email client	iOS and Android
BlackBerry	body
Boxer	kAWEmailClientEmailBody
Citrix	body
Gmail	body
MobileIron	body
Outlook	body
Other clients that support the mailto protocol	body