Tango Reserve Mobile App – MDM vs. MAM Deployment

The Tango Reserve mobile app can be deployed and managed through different enterprise mobility solutions. Customers often ask about the difference between Mobile Device Management (MDM) and Mobile Application Management (MAM) for Reserve.

The key takeaway:
Reserve works well in MDM environments, but it is not fully MAM-compliant. While the app can technically be used with MAM, some app protection policies may not apply because Reserve does not currently integrate with the Intune SDK on iOS.

MDM (Mobile Device Management)

When Reserve is deployed through MDM, organizations can enforce device-level policies to protect access and data. Examples include:

• Browser controls – Require Microsoft Edge for all web access to corporate resources.

• Conditional Access – Block unmanaged browsers from accessing Reserve.

• Authentication – Require Microsoft Authenticator for single sign-on (SSO) and device registration.

These policies work because they apply to the device as a whole, not just to individual apps.

Best choice if you want full policy enforcement for Reserve.

MAM (Mobile Application Management)

MAM provides security and compliance at the app level, without managing the entire device. For this to work, an app must be “MAM-aware” (integrated with the Intune SDK).

Since the Reserve app does not currently include the Intune SDK on iOS:

• It will not respond to App Protection Policies (APP) such as:

  • Redirecting authentication through Microsoft Edge.

  • Enforcing copy/paste or data sharing restrictions.

  • Requiring Edge for in-app web views or authentication.

• A possible workaround exists (removing “://” from the agilquestForum entry in the App Protection Policy). This may allow some MAM features to function, but it is not a formal or fully compliant solution.

⚠️ Reserve may function under MAM, but it cannot guarantee full adherence to MAM app protection policies.

• For full security and compliance: Deploy Reserve using MDM.

• For organizations requiring MAM-only deployment: Reserve can be used, but expect limitations. Policies may not fully apply, and workarounds are not officially supported as long-term solutions.