This page explains how to configure the Gemini Enterprise mobile app on user devices. Gemini Enterprise app administrator can choose to configure access for users using one of three available methods.
Overview
As a Gemini Enterprise administrator, you can configure the mobile app for users with one of three methods:
You can use a Mobile Device Management (MDM) solution to remotely install and configure the app on user devices. MDM solutions allow admins to complete set up steps prior to delivering apps to users.
You can enable a QR code within the Gemini Enterprise web app. Users can then configure the mobile app by scanning this QR code. QR codes can simplify the distribution of access to users and can be used in addition to MDM solutions.
You can generate an access link and distribute it to users, which lets them configure the app by opening the link on their mobile devices.
The following sections describe the steps required by each method.
Before you begin
Before you configure the app for users, set up an identity provider for your Gemini Enterprise organization. The Gemini Enterprise mobile app supports the use of Google Identity and Microsoft Entra ID.
Google Identity
Confirm that your Gemini Enterprise instance is configured to use Google Identity. For more details, see Configure identity provider.
Microsoft Entra ID
If your organization uses Microsoft Entra ID, update your client configuration as follows:
- Navigate to App registrations in the Entra administrator center, and select your application.
- Select Add Redirect URI then choose Mobile and desktop applications.
- Enter the redirect URI,
https://vertexaisearch.cloud.google.com/m/oauth-redirect, and click Configure. - In the Settings tab, enable ID tokens, which are used for implicit and hybrid flows.
Use a Mobile Device Management (MDM) solution
The Gemini Enterprise administrator panel provides an app URL that contains the
parameters required to configure the mobile app in your MDM solution. These
parameters map directly to AppConfig parameters in the AppConfig standard and
can be used to configure the app, and enforce security policies.
The following steps use Google Endpoint
Management (GEM) as an example of configuring an MDM, but the AppConfig parameters
should be applicable to other MDM solutions. These steps require access to your MDM administrator console.
If you don't have access, contact your organization administrator for next steps.
To configure the app for users in the GEM MDM management solution:
In the Google Cloud console, go to the Gemini Enterprise page.
Click your app. The Overview page displays.
Click Copy URL to copy the mobile link. The format of the mobile link differs based on your identity provider.
Google Identity
If your Gemini Enterprise app uses Google as an identity provider, the mobile app URL looks like this:
https://vertexaisearch.cloud.google.com/mobile?cid=123&cid_location=globalMicrosoft Entra ID
If your Gemini Enterprise app uses Microsoft Entra ID as an identity provider, the mobile app URL looks like this:
https://vertexaisearch.cloud.google.com/mobile?cid=123 &cid_location=global &idp=locations/global/workforcePools/PROJECT/providers/entra &tenant_id=111 &client_id=222 &project_id=ge-projectExtract the parameters from the app URL, and use them to fill in the app configuration in your MDM administrator console:
Google Identity
Deeplink parameter MDM configuration key MDM configuration name Example value cidconfig_idConfiguration ID 123cid_locationlocationLocation globalLeave all other fields empty.
<dict> <key>config_id</key> <string>123</string> <key>location</key> <string>global</string> </dict>Microsoft Entra ID
Deeplink parameter MDM configuration key MDM configuration name Example value cidconfig_idConfiguration ID 123cid_locationlocationLocation globalidpidentity_providerIdentity Provider locations/global/workforcePools/PROJECT/providers/entratenant_idtenant_idEntra tenant ID 111client_idclient_idEntra client ID 222project_idproject_idProject ID ge-project
Enable a QR code on the web app homepage
As a Gemini Enterprise administrator, you can display a QR code on the web app homepage, which allows users to configure the mobile app on their devices by scanning the QR code using their device's camera. This serves as a simpler way to distribute the access link to users.
To manage the configuration QR code visibility:
In the Google Cloud console, go to the Gemini Enterprise page.
Click the name of the app that you want to configure.
Click Configurations and then click the Feature Management tab.
Turn on or turn off the Enable QR code login toggle to display or hide the QR code on the app user's home page.
After the QR code is enabled, users can scan the QR code displayed on their Gemini Enterprise web app using their mobile device to configure and connect the mobile app.
To view the QR code on the web app to set up the mobile app:
- Open your Gemini Enterprise web app.
- Click Settings & help.
- Click Mobile login.
- Scan the QR code with your mobile device to sign in to the Gemini Enterprise mobile app.
Generate an access link
To generate the access link for distribution to Gemini Enterprise mobile app users, do the following:
In the Google Cloud console, go to the Gemini Enterprise page.
Click your app. The Overview page displays.
Click Copy URL to copy the mobile link. You can then distribute the link to users. The format of the mobile link differs based on your identity provider.
Google Identity
If your Gemini Enterprise uses Google as an identity provider, the mobile app URL looks like this:
https://vertexaisearch.cloud.google.com/mobile?cid=123&cid_location=globalMicrosoft Entra ID
If your Gemini Enterprise uses Microsoft Entra ID as an identity provider, the mobile app URL looks like this:
https://vertexaisearch.cloud.google.com/mobile?cid=123 &cid_location=global &idp=locations/global/workforcePools/PROJECT/providers/entra &tenant_id=111 &client_id=222 &project_id=ge-project