Configure the mobile app

This page explains how to configure the Gemini Enterprise mobile app on user devices. Gemini Enterprise app administrator can choose to configure access for users using one of three available methods.

Overview

As a Gemini Enterprise administrator, you can configure the mobile app for users with one of three methods:

  • You can use a Mobile Device Management (MDM) solution to remotely install and configure the app on user devices. MDM solutions allow admins to complete set up steps prior to delivering apps to users.

  • You can enable a QR code within the Gemini Enterprise web app. Users can then configure the mobile app by scanning this QR code. QR codes can simplify the distribution of access to users and can be used in addition to MDM solutions.

  • You can generate an access link and distribute it to users, which lets them configure the app by opening the link on their mobile devices.

The following sections describe the steps required by each method.

Before you begin

Before you configure the app for users, set up an identity provider for your Gemini Enterprise organization. The Gemini Enterprise mobile app supports the use of Google Identity and Microsoft Entra ID.

Google Identity

Confirm that your Gemini Enterprise instance is configured to use Google Identity. For more details, see Configure identity provider.

Microsoft Entra ID

If your organization uses Microsoft Entra ID, update your client configuration as follows:

  1. Navigate to App registrations in the Entra administrator center, and select your application.
  2. Select Add Redirect URI then choose Mobile and desktop applications.
  3. Enter the redirect URI, https://vertexaisearch.cloud.google.com/m/oauth-redirect, and click Configure.
  4. In the Settings tab, enable ID tokens, which are used for implicit and hybrid flows.

Use a Mobile Device Management (MDM) solution

The Gemini Enterprise administrator panel provides an app URL that contains the parameters required to configure the mobile app in your MDM solution. These parameters map directly to AppConfig parameters in the AppConfig standard and can be used to configure the app, and enforce security policies.

The following steps use Google Endpoint Management (GEM) as an example of configuring an MDM, but the AppConfig parameters should be applicable to other MDM solutions. These steps require access to your MDM administrator console. If you don't have access, contact your organization administrator for next steps.

To configure the app for users in the GEM MDM management solution:

  1. In the Google Cloud console, go to the Gemini Enterprise page.

    Go to AI Applications

    1. Click your app. The Overview page displays.

    2. Click Copy URL to copy the mobile link. The format of the mobile link differs based on your identity provider.

      Google Identity

      If your Gemini Enterprise app uses Google as an identity provider, the mobile app URL looks like this:

         https://vertexaisearch.cloud.google.com/mobile?cid=123&cid_location=global
      

      Microsoft Entra ID

      If your Gemini Enterprise app uses Microsoft Entra ID as an identity provider, the mobile app URL looks like this:

         https://vertexaisearch.cloud.google.com/mobile?cid=123
         &cid_location=global
         &idp=locations/global/workforcePools/PROJECT/providers/entra
         &tenant_id=111
         &client_id=222
         &project_id=ge-project
      
    3. Extract the parameters from the app URL, and use them to fill in the app configuration in your MDM administrator console:

      Google Identity

      Deeplink parameter MDM configuration key MDM configuration name Example value
      cid config_id Configuration ID 123
      cid_location location Location global

      Leave all other fields empty.

      <dict>
         <key>config_id</key>
         <string>123</string>
         <key>location</key>
         <string>global</string>
      </dict>
      

      Microsoft Entra ID

      Deeplink parameter MDM configuration key MDM configuration name Example value
      cid config_id Configuration ID 123
      cid_location location Location global
      idp identity_provider Identity Provider locations/global/workforcePools/PROJECT/providers/entra
      tenant_id tenant_id Entra tenant ID 111
      client_id client_id Entra client ID 222
      project_id project_id Project ID ge-project

Enable a QR code on the web app homepage

As a Gemini Enterprise administrator, you can display a QR code on the web app homepage, which allows users to configure the mobile app on their devices by scanning the QR code using their device's camera. This serves as a simpler way to distribute the access link to users.

To manage the configuration QR code visibility:

  1. In the Google Cloud console, go to the Gemini Enterprise page.

    Gemini Enterprise

  2. Click the name of the app that you want to configure.

  3. Click Configurations and then click the Feature Management tab.

  4. Turn on or turn off the Enable QR code login toggle to display or hide the QR code on the app user's home page.

After the QR code is enabled, users can scan the QR code displayed on their Gemini Enterprise web app using their mobile device to configure and connect the mobile app.

To view the QR code on the web app to set up the mobile app:

  1. Open your Gemini Enterprise web app.
  2. Click Settings & help.
  3. Click Mobile login.
  4. Scan the QR code with your mobile device to sign in to the Gemini Enterprise mobile app.

To generate the access link for distribution to Gemini Enterprise mobile app users, do the following:

  1. In the Google Cloud console, go to the Gemini Enterprise page.

    Go to AI Applications

  2. Click your app. The Overview page displays.

  3. Click Copy URL to copy the mobile link. You can then distribute the link to users. The format of the mobile link differs based on your identity provider.

    Google Identity

    If your Gemini Enterprise uses Google as an identity provider, the mobile app URL looks like this:

        https://vertexaisearch.cloud.google.com/mobile?cid=123&cid_location=global
    

    Microsoft Entra ID

    If your Gemini Enterprise uses Microsoft Entra ID as an identity provider, the mobile app URL looks like this:

        https://vertexaisearch.cloud.google.com/mobile?cid=123
        &cid_location=global
        &idp=locations/global/workforcePools/PROJECT/providers/entra
        &tenant_id=111
        &client_id=222
        &project_id=ge-project