Skip to content
Punch List app iconPunch List

Enterprise deployment

Deploy Punch List with your MDM

Punch List enterprise licensing works through managed app configuration. You push one license key from your MDM console, and Pro unlocks automatically on every managed device. There are no per-user accounts, no sign-in screens, and no app store billing. Jump to your MDM below for the step-by-step guide.

Covers iOS, iPadOS, and Android.

The model

One key, pushed once, unlocked everywhere

1

One license key

When you buy seats we generate a single license key tied to your organization and email it to your IT contact. One key covers your whole fleet across iOS, iPadOS, and Android.

2

Pushed by your MDM

You set three key/value pairs on the Punch List app in your MDM console. Your MDM delivers the app and the configuration silently to every device in the target group.

3

Unlocks on launch

When someone on your crew opens Punch List, the app reads the key, validates it, and unlocks Pro automatically. No sign-in screens, no purchase prompts, no license codes to type.

Before you start

Prerequisites

  • An MDM that can push managed app configuration to enrolled devices (every guide below qualifies).
  • For iOS and iPadOS: an Apple Business Manager account, linked to your MDM, with the free Punch List app licenses acquired under Apps and Books.
  • For Android: Managed Google Play access, with Punch List approved for your organization.
  • Your Punch List license key, org ID, and org name from the setup email we send after purchase.
  • Network access from devices to https://api.mypunchlistapp.com, the only domain Punch List needs to reach.

Choose your MDM

Jump to your deployment guide

Each guide walks through adding the app, setting the three keys, and confirming Pro unlocked on a test device.

Microsoft Intune

iOS, iPadOS, and Android

Deploy with Microsoft Intune

Jamf Pro

iOS and iPadOS

Deploy with Jamf Pro

Omnissa Workspace ONE

iOS, iPadOS, and Android

Deploy with Omnissa Workspace ONE

Kandji

iOS and iPadOS

Deploy with Kandji

Mosyle

iOS and iPadOS

Deploy with Mosyle

Hexnode

iOS, iPadOS, and Android

Deploy with Hexnode

Using a different MDM? The same three keys apply to any tool that supports managed app configuration. Email enterprise@mypunchlistapp.com and we will help you map the steps to your console.

Deploy Punch List with Microsoft Intune

Covers iOS, iPadOS, and Android.

Microsoft Intune deploys the Punch List app and its enterprise license to your managed iPhones, iPads, and Android devices using an App Configuration Policy. You push one license key, and Pro unlocks automatically the first time each device opens the app. No per-user accounts, no app store billing.

IT administrators who manage a construction fleet with Microsoft Intune and need to unlock Punch List Pro across every managed device from one console.

  1. 1

    Add Punch List to your app library

    Sign in to the Microsoft Intune admin center and go to Apps. Add Punch List as an iOS store app (search the App Store) for iPhone and iPad, or as a Managed Google Play app for Android. Assign it to the device group that should receive it.

  2. 2

    Create an App Configuration Policy

    Go to Apps, then App configuration policies, and add a policy under Managed devices. Choose Managed devices, not Managed apps: a Managed apps (app-protection) policy uses a different delivery channel that Punch List does not read, so activation will silently fail. Set the platform (iOS/iPadOS or Android Enterprise) and target the Punch List app.

  3. 3

    Set the three configuration values

    Use the configuration designer (or enter the key/value pairs manually) and add the three keys below, each as a String value.

  4. 4

    Assign and save

    Assign the policy to the same device group that receives the app, then create it. Devices pick up the app and configuration on their next Intune check-in, usually within a few minutes to an hour.

KeyTypeWhat to enterExample
license_keyStringYour license key from the setup emailpl_ent_acme_construction_a1b2c3d4e5f6
org_idStringYour org ID from the setup emailacme_construction
org_nameStringYour org name from the setup emailAcme Construction

Important notes

  • Key names are case-sensitive. Use exactly license_key, org_id, and org_name (lowercase, with underscores). Leading or trailing whitespace in a value will cause activation to fail.
  • On Android, Intune builds the configuration screen from the schema the app publishes to Managed Google Play, so the three keys appear only once the Punch List Android build declares them. If no Punch List keys appear, email support@mypunchlistapp.com to confirm the current Android build status.

Microsoft Intune troubleshooting

My App Configuration Policy has no effect. What is wrong?
The most common cause is creating the policy under Managed apps instead of Managed devices. Managed apps is the app-protection (MAM) channel, which Punch List does not read. Delete the policy and recreate it under Apps, App configuration policies, Add, Managed devices.
The Android configuration keys do not appear in Intune.
Intune reads the available keys from the schema the Android app publishes to Managed Google Play. If the Punch List keys are not listed yet, the Android build has not declared them. Email support@mypunchlistapp.com to check the current build status.
How long until devices activate after I save the policy?
Devices receive the app and configuration on their next Intune check-in, typically a few minutes to an hour. To speed it up, select the device in Intune and choose Sync.
Do I still need Apple Business Manager with Intune?
Yes, for iOS and iPadOS. Link Apple Business Manager to Intune and acquire the free Punch List app licenses under Apps and Books so Intune can install the app silently. Android uses Managed Google Play instead.

If a device does not activate within 30 seconds of first launch, confirm it received the configuration and that the three keys have no typos or extra whitespace, then email support@mypunchlistapp.com with your org ID.

Deploy Punch List with Jamf Pro

Covers iOS and iPadOS.

Jamf Pro deploys the Punch List app and its enterprise license to your managed iPhones and iPads. You paste a short XML property list (plist) with one license key into the app record, and Pro unlocks automatically the first time each device opens the app.

Apple-focused IT teams running Jamf Pro who need to unlock Punch List Pro across a managed iPhone and iPad fleet.

  1. 1

    Add Punch List as a managed app

    In Jamf Pro, go to Devices, then Mobile Device Apps, and add a new App Store app. Search for Punch List, then set the distribution method that fits your environment (for example, Install Automatically).

  2. 2

    Scope the app to your device group

    On the Scope tab, add the smart group or static group of devices that should receive Punch List.

  3. 3

    Add the App Configuration property list

    On the App Configuration tab, paste the property list below, replacing the placeholder values with your license key, org ID, and org name from the setup email.

  4. 4

    Save and distribute

    Save. Jamf Pro begins distributing the app and configuration to in-scope devices on their next check-in, typically within a few minutes if devices are online.

KeyTypeWhat to enterExample
license_keyStringYour license key from the setup emailpl_ent_acme_construction_a1b2c3d4e5f6
org_idStringYour org ID from the setup emailacme_construction
org_nameStringYour org name from the setup emailAcme Construction

Paste this property list into the App Configuration field, replacing the placeholder values with your own:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>license_key</key>
    <string>pl_ent_acme_construction_a1b2c3d4e5f6</string>
    <key>org_id</key>
    <string>acme_construction</string>
    <key>org_name</key>
    <string>Acme Construction</string>
  </dict>
</plist>

Important notes

  • Jamf Pro delivers managed keys as an XML property list (plist). Keep the key names exactly license_key, org_id, and org_name.
  • Android: Jamf's Android management runs through Managed Google Accounts with a different console layout. We have not verified the Punch List managed configuration path on Jamf's Android support, so rather than hand you steps that may not match your console, email support@mypunchlistapp.com and we will work through it with you.
  • Jamf Now (a different product from Jamf Pro) does not offer custom app configuration, so it cannot push the license key on any platform.

Jamf Pro troubleshooting

Where do I paste the license key in Jamf Pro?
On the Punch List app record, open the App Configuration tab and paste the XML property list with the three keys. Jamf Pro delivers it to the app as managed app configuration.
Can I deploy Punch List to Android with Jamf?
Jamf's Android management uses a different workflow that we have not verified for Punch List's managed configuration. Email support@mypunchlistapp.com before you start and we will help you work through it.
Can I use Jamf Now instead of Jamf Pro?
No. Jamf Now does not support custom app configuration, so it cannot push the license key. You will need Jamf Pro or another MDM that supports managed app configuration.
How do I confirm a device received the configuration?
In Jamf Pro, go to Devices, Search Inventory, open the device, and under Management, Mobile Device Apps confirm Punch List shows Managed status.

If a device does not activate within 30 seconds of first launch, confirm it received the configuration and that the three keys have no typos or extra whitespace, then email support@mypunchlistapp.com with your org ID.

Deploy Punch List with Omnissa Workspace ONE

Covers iOS, iPadOS, and Android.

Omnissa Workspace ONE (formerly VMware Workspace ONE) deploys the Punch List app and its enterprise license to your managed iPhones, iPads, and Android devices using Application Configuration on the app assignment. You push one license key, and Pro unlocks automatically at first launch.

IT administrators running Omnissa Workspace ONE UEM who need to roll out Punch List Pro across a mixed construction fleet.

  1. 1

    Add Punch List to your app catalog

    In the Workspace ONE UEM console, go to Apps & Books, Applications, Native. Add Punch List from the App Store for iOS and iPadOS, or from Managed Google Play for Android.

  2. 2

    Assign the app to your smart group

    Open Punch List and click Assign. Select your target smart group and set the delivery method to Auto so the app installs without user action.

  3. 3

    Enable Application Configuration

    In the assignment, expand the Application Configuration section and enable Send Application Configuration. Add the three keys below, each as a String value.

  4. 4

    Save and publish

    Click Save & Publish. Devices in the smart group receive the app and configuration on their next Workspace ONE check-in.

KeyTypeWhat to enterExample
license_keyStringYour license key from the setup emailpl_ent_acme_construction_a1b2c3d4e5f6
org_idStringYour org ID from the setup emailacme_construction
org_nameStringYour org name from the setup emailAcme Construction

Important notes

  • On Android, add Punch List from Managed Google Play and set the same three keys under Application Configuration in the app assignment.
  • The license key value is identical across platforms, so one key covers your entire iOS and Android fleet.

Omnissa Workspace ONE troubleshooting

Workspace ONE used to be VMware. Is this the same product?
Yes. Workspace ONE is now part of Omnissa (formerly VMware Workspace ONE). The deployment steps are the same.
Where are the managed keys set in Workspace ONE?
In the app assignment, under Application Configuration. Enable Send Application Configuration and add license_key, org_id, and org_name as String values.
How do I push the configuration immediately?
Devices pick it up on their next check-in. To force it, go to Devices, Device List View, select the devices, and send a Query.
Does one configuration cover both iOS and Android?
You set the same three keys in each platform's app assignment. The license key value itself is identical across platforms, so one key covers your whole fleet.

If a device does not activate within 30 seconds of first launch, confirm it received the configuration and that the three keys have no typos or extra whitespace, then email support@mypunchlistapp.com with your org ID.

Deploy Punch List with Kandji

Covers iOS and iPadOS.

Kandji deploys the Punch List app and its enterprise license to your managed iPhones and iPads using a Library Item with app configuration. You set one license key, and Pro unlocks automatically the first time each device opens the app.

Apple-focused IT teams running Kandji who need to unlock Punch List Pro across a managed iPhone and iPad fleet.

  1. 1

    Add Punch List as a Library Item

    In your Kandji tenant, go to Library and add Punch List as an App Store app (acquired through Apps and Books in Apple Business Manager).

  2. 2

    Turn on app configuration

    Open the Punch List Library Item and scroll to the bottom, then check Set app configuration to enable the managed configuration dictionary.

  3. 3

    Set the three keys

    In the configuration dictionary, add the three keys below, each as a String value.

  4. 4

    Assign and save

    Scope the Library Item to the Blueprint or Assignment Rule that targets your devices, then save. Kandji enforces the configuration and updates it on devices automatically if you change it.

KeyTypeWhat to enterExample
license_keyStringYour license key from the setup emailpl_ent_acme_construction_a1b2c3d4e5f6
org_idStringYour org ID from the setup emailacme_construction
org_nameStringYour org name from the setup emailAcme Construction

Important notes

  • Kandji manages Apple devices (iPhone, iPad, and Mac) only. For Android, use a Managed Google Play capable MDM such as Intune, Workspace ONE, or Hexnode. The same license key works on both.

Kandji troubleshooting

Where is app configuration in Kandji?
Open the Punch List Library Item and scroll to the bottom, then check Set app configuration. Add the three keys as String values in the dictionary.
Does Kandji support Android?
No. Kandji manages Apple devices only. Deploy Punch List to Android with a Managed Google Play capable MDM such as Intune, Workspace ONE, or Hexnode. The same license key works on both.
What happens if I change the license key later?
Kandji enforces the configuration going forward and pushes updates to devices automatically, so editing the value in the Library Item updates enrolled devices.
How do I target only some devices?
Use Blueprints or Assignment Rules to scope the Punch List Library Item to the devices that should receive it.

If a device does not activate within 30 seconds of first launch, confirm it received the configuration and that the three keys have no typos or extra whitespace, then email support@mypunchlistapp.com with your org ID.

Deploy Punch List with Mosyle

Covers iOS and iPadOS.

Mosyle deploys the Punch List app and its enterprise license to your managed iPhones and iPads using App Configuration. You push one license key, and Pro unlocks automatically the first time each device opens the app.

Apple-focused IT teams running Mosyle Business or Mosyle Manager who need to unlock Punch List Pro across a managed iPhone and iPad fleet.

  1. 1

    Add Punch List as a managed app

    In Mosyle, add Punch List as an App Store app, acquired through Apple Business Manager (Apps and Books).

  2. 2

    Open App Configuration

    In the Punch List app settings, open the App Configuration section, where Mosyle lets you push key/value pairs to the app.

  3. 3

    Set the three keys

    Add the three keys below, each as a String value.

  4. 4

    Assign and save

    Assign the app to the device group or profile that targets your devices, then save. Devices receive the app and configuration on their next Mosyle check-in.

KeyTypeWhat to enterExample
license_keyStringYour license key from the setup emailpl_ent_acme_construction_a1b2c3d4e5f6
org_idStringYour org ID from the setup emailacme_construction
org_nameStringYour org name from the setup emailAcme Construction

Important notes

  • Mosyle manages Apple devices (iPhone, iPad, and Mac). For Android, use a Managed Google Play capable MDM. The same license key covers iOS and Android.
  • Mosyle supports configuration variables, but Punch List's three keys take fixed String values from your setup email. Paste them exactly, with no extra whitespace.

Mosyle troubleshooting

Where do I set the license key in Mosyle?
In the Punch List app's App Configuration section. Add license_key, org_id, and org_name as String values.
Does Mosyle handle Android?
Mosyle manages Apple devices. Use a Managed Google Play capable MDM for Android. One license key covers both iOS and Android.
Can I use Mosyle configuration variables for these keys?
Mosyle supports configuration variables, but Punch List's three keys take fixed String values from your setup email. Paste the values exactly, with no extra whitespace.
How soon do devices activate?
On their next Mosyle check-in. Open Punch List on a test device and confirm Pro is unlocked before rolling out to the full fleet.

If a device does not activate within 30 seconds of first launch, confirm it received the configuration and that the three keys have no typos or extra whitespace, then email support@mypunchlistapp.com with your org ID.

Deploy Punch List with Hexnode

Covers iOS, iPadOS, and Android.

Hexnode UEM deploys the Punch List app and its enterprise license to your managed iPhones, iPads, and Android devices using app configuration. You push one license key, and Pro unlocks automatically at first launch.

IT administrators running Hexnode UEM who need to roll out Punch List Pro across a mixed construction fleet.

  1. 1

    Add Punch List to the app inventory

    In the Hexnode UEM console, add Punch List to your App Inventory: an App Store app for iOS and iPadOS, or a Managed Google Play app for Android.

  2. 2

    Add the app configuration

    On iOS, attach an app configuration (Hexnode accepts an XML key/value dictionary that deploys alongside the app). On Android, use the Android Enterprise managed configuration form.

  3. 3

    Set the three keys

    Add the three keys below, each as a String value.

  4. 4

    Deploy

    Deploy the app to the target device group or policy. The configuration is applied as the app installs, and Punch List activates on first launch.

KeyTypeWhat to enterExample
license_keyStringYour license key from the setup emailpl_ent_acme_construction_a1b2c3d4e5f6
org_idStringYour org ID from the setup emailacme_construction
org_nameStringYour org name from the setup emailAcme Construction

Important notes

  • On Android, Hexnode reads the available keys from the schema the app publishes to Managed Google Play, so the three keys appear once the Punch List Android build declares them. If they are not listed, email support@mypunchlistapp.com.

Hexnode troubleshooting

Does Hexnode support both iOS and Android?
Yes. Add Punch List from the App Store for iOS and iPadOS and from Managed Google Play for Android, and set the same three keys on each.
How does Hexnode deliver the configuration?
On iOS it deploys an XML key/value dictionary alongside the app install. On Android it uses Android Enterprise managed configuration. Either way the app reads the keys on launch.
The Android keys are not showing in Hexnode.
Hexnode reads the Android keys from the schema the app publishes to Managed Google Play. If they are not listed, the Android build has not declared them yet. Email support@mypunchlistapp.com.
When does Pro unlock?
The configuration applies as the app installs, then Punch List activates on first launch. Confirm on a test device before a full rollout.

If a device does not activate within 30 seconds of first launch, confirm it received the configuration and that the three keys have no typos or extra whitespace, then email support@mypunchlistapp.com with your org ID.

Verify

Confirm Pro unlocked on a test device

Whichever MDM you used, test activation on a single device before rolling out to your full fleet.

  1. 1Open Punch List on a test device that has received the app and configuration from your MDM.
  2. 2On first launch the app briefly shows "Activating..." while it validates the license, usually 1 to 2 seconds on a normal connection.
  3. 3After validation the app opens straight to the main screen. No sign-in, no purchase prompt, no license code to type.
  4. 4To confirm Pro is active, open Settings and check that it shows "Licensed by [your organization name]" with Pro features unlocked and no upgrade prompts.

Deployment FAQ

Common questions

How does Punch List enterprise deployment work?
You buy seats and we generate one license key for your organization. Your IT admin pushes that key to managed devices through your MDM as a managed app configuration value, using three keys: license_key, org_id, and org_name. When someone opens Punch List, the app reads the key, validates it against our servers, and unlocks Pro automatically. No per-user accounts and no app store billing.
Which MDM tools can deploy Punch List?
Any MDM that supports managed app configuration, which is the Apple and Google standard. We publish step-by-step guides for Microsoft Intune, Jamf Pro, Omnissa Workspace ONE, Kandji, Mosyle, and Hexnode. Some of these manage Apple devices only, so a mixed fleet may need a second tool for Android. If your MDM is not listed, the same three keys still apply and our team can help.
Can I deploy with Jamf Now?
No. Jamf Now, which is a different product from Jamf Pro, does not offer custom app configuration, so it cannot push the license key on any platform. Use Jamf Pro or another MDM that supports managed app configuration.
Do field workers need to create accounts or sign in?
No. Punch List unlocks from the license key on the device, so your crew never creates accounts, signs in, or touches app store billing. The app appears on their device and works from the first tap.
Does one key really cover both iOS and Android?
Yes. The license key is platform-agnostic. The same key works on iPhone, iPad, and Android. A seat counts as one device regardless of platform.

Roll out Punch List to your whole crew

One license key, pushed from the console you already use, unlocked before lunch.

Enterprise overviewTalk to sales
enterprise@mypunchlistapp.com