Accelerated resource distribution in a unified endpoint management system
Systems and methods presented herein provide examples for distributing resources in a UEM system. In one example, the UEM system can receive a request to check out a user device enrolled in the UEM system. The request can include a profile identifier (“ID”) of a user profile making the request and attributes of the user device. The UEM system can create a hash of group IDs associated with the profile ID. The UEM system can create a device context that includes the device attributes and the hash. The UEM system can then determine if the device context matches to a resource context. Resource contexts can identify a set of UEM resources associated with a device context. Where a match is found, the UEM system can provide the corresponding resources to the user device.
1. A method for distributing resources in a Unified Endpoint Management (UEM) system, comprising:
receiving, at a device service of the UEM system from a user device, a check-out request that includes an identifier (“ID”) corresponding to a user profile making the request, and a set of attributes associated with the user device;
communicating the user profile and the set of attributes from the device service to a resource service of the UEM system;
communicating between the resource service and a database of the UEM system to send resources associated with a resource context to the user device, the resource context associated with a device context, the resource context identifying the resources assigned to user devices with the device context, the device context determined for the check-out request based on the set of attributes and a hash, the hash determined from at least one group ID associated with the user profile; and
installing, at the user device, the resources.
2. The method of claim 1 , wherein the set of resources includes at least a configuration profile and an application.
3. The method of claim 1 , wherein the set of attributes includes at least an organization group ID associated with the user device, a version of a management application installed on the user device, and an enrollment mode.
4. The method of claim 1 , wherein the resources associated with the resource context include a third-party application, and providing the resources associated with the resource context includes sending instructions to a third-party server of the third-party application to download the third-party application to the user device.
5. The method of claim 1 , wherein, in an instance where a resource context associated with the device context cannot be identified, the stages further comprise:
determining a new set of resources based on the device context;
creating a new resource context that identifies the new set of resources assigned to user devices with the device context; and
mapping the device context to the new resource context in a data table.
6. The method of claim 5 , further comprising providing the new set of resources to user devices that send a check-out request and have the same device context.
7. The method of claim 1 , further comprising:
determining, based on the resource context, a third-party application that the user profile is authorized to install;
sending, to a server associated with the third-party application, instructions to allow the user device to download the third-party application.
8. A non-transitory, computer-readable medium containing instructions that, when executed by a hardware-based processor, performs stages for distributing resources in a Unified Endpoint Management (UEM) system, the stages comprising:
receiving, at a device service of the UEM system from a user device, a check-out request that includes an identifier (“ID”) corresponding to a user profile making the request, and a set of attributes associated with the user device;
communicating the user profile and the set of attributes from the device service to a resource service of the UEM system;
communicating between the resource service and a database of the UEM system to send resources associated with a resource context to the user device, the resource context associated with a device context, the resource context identifying the resources assigned to user devices with the device context, the device context determined for the check-out request based on the set of attributes and a hash, the hash determined from at least one group ID associated with the user profile; and
installing, at the user device, the resources.
9. The non-transitory, computer-readable medium of claim 8 , wherein the set of resources includes at least one of a configuration profile and an application.
10. The non-transitory, computer-readable medium of claim 8 , wherein the set of attributes includes at least an organization group ID associated with the user device, a version of a management application installed on the user device, and an enrollment mode.
11. The non-transitory, computer-readable medium of claim 8 , wherein the resources associated with the resource context include a third-party application, and providing the resources associated with the resource context includes sending instructions to a third-party server of the third-party application to download the third-party application to the user device.
12. The non-transitory, computer-readable medium of claim 8 , wherein, in an instance where a resource context associated with the device context cannot be identified, the stages further comprise:
determining a new set of resources based on the device context;
creating a new resource context that identifies the new set of resources assigned to the user devices with the device context; and
mapping the device context to the new resource context in a data table.
13. The non-transitory, computer-readable medium of claim 8 , the stages further comprising providing the new set of resources to user devices that send a check-out request and have the same device context.
14. The non-transitory, computer-readable medium of claim 8 , the stages further comprising:
determining, based on the resource context, a third-party application that the user profile is authorized to install;
sending, to a server associated with the third-party application, instructions to allow the user device to download the third-party application.
15. A system for distributing resources in a Unified Endpoint Management (UEM) system, comprising:
a memory storage including a non-transitory, computer-readable medium comprising instructions; and
a computing device including a hardware-based processor that executes the instructions to carry out stages comprising:
receiving, at a device service of the UEM system from a user device, a check-out request that includes an identifier (“ID”) corresponding to a user profile making the request, and a set of attributes associated with the user device;
communicating the user profile and the set of attributes from the device service to a resource service of the UEM system;
communicating between the resource service and a database of the UEM system to send resources associated with a resource context to the user device, the resource context associated with a device context, the resource context identifying the resources assigned to user devices with the device context, the device context determined for the check-out request based on the set of attributes and a hash, the hash determined from at least one group ID associated with the user profile; and
installing, at the user device, the resources.
16. The system of claim 15 , wherein the set of resources includes at least a configuration profile and an application.
17. The system of claim 15 , wherein the set of attributes further at least an organization group ID associated with the user device, a version of a management application installed on the user device, and an enrollment mode.
18. The system of claim 15 , wherein the resources associated with the resource context include a third-party application, and providing the resources associated with the resource context includes sending instructions to a third-party server of the third-party application to download the third-party application to the user device.
19. The system of claim 15 , wherein, in an instance where a resource context associated with the device context cannot be identified, the stages further comprise:
determining a new set of resources based on the device context;
creating a new resource context that identifies the new set of resources assigned to the user devices with the device context; and
mapping the device context to the new resource context in a data table.
20. The system of claim 15 , the stages further comprising providing the new set of resources to user devices that send a check-out request and have the same device context.