Autonomous Single App Mode (ASAM): The next-gen iOS Kiosks for Exams & Check-Ins

What is Autonomous Single App Mode (ASAM)?

Autonomous Single App Mode (ASAM) is a specialized security framework for supervised iOS and iPadOS devices. It allows a specific app to enter and exit Single App Mode programmatically. This means the app itself controls the lockdown without needing a direct UEM command.

For IT administrators, this represents a significant shift in device management. Managed Single App Mode is designed for persistent lockdown, whereas Guided Access and ASAM support temporary single-app sessions. ASAM offers a “just-in-time” approach. The device stays flexible for general use until a specific task begins. Once the task starts, the app invokes the ASAM restriction. When the app enters Autonomous Single App Mode, the device is restricted to that app, preventing users from switching to other apps until the session ends.

The Technical Evolution of iOS Kiosks

Apple has refined its lockdown capabilities over many years. Guided Access, managed Single App Mode, ASAM, and assessment mode are distinct Apple mechanisms for creating restricted single-app experiences. ASAM offers a hybrid solution by combining the security of a managed lock with the flexibility of local app logic.

• Dynamic Security: The device locks only when a user starts a specific session.
• Offline Resilience: The lock stays active even if the Wi-Fi signal drops out.
• Ease of Use: Users exit the lock naturally by finishing their assigned task.
• Reduced Admin Load: IT does not need to push manual “Unlock” commands frequently.

Why Modern Enterprises Need Autonomous Single App Mode

ASAM can reduce distractions and prevent users from switching to other apps, but data integrity depends on additional application and security controls. It allows one iPad to serve many purposes safely throughout the day. Organizations no longer need to dedicate hardware to a single, permanent function.

1. Digital Exam Environments

In digital testing, students must not browse the web for answers. ASAM locks the iPad the moment the test begins. ASAM can prevent students from switching to browsers or messaging apps, but secure testing may require Automatic Assessment Configuration and other assessment-specific controls. If developers program the assessment app to request an exit from ASAM after submission, the device can return to its unrestricted state once that request succeeds.

2. Visitor and Event Check-Ins

Companies deploy iPads as self service kiosks. ASAM ensures that once a visitor starts the check-in process, they are locked into the form. After the check-in workflow is complete, the application can programmatically exit Autonomous Single App Mode and return the device to its normal state.

3. Healthcare Patient Intake

Hospitals use iPads for private patient intake and consent forms. ASAM ensures users cannot access other apps or settings during the process. Once the form is submitted, the device returns to its normal state for the next clinical task.

4. Retail Feedback Kiosks

Retailers often deploy tablets for customer surveys or loyalty registrations. The application can enter Autonomous Single App Mode during the interaction and exit it when the workflow is complete.

Key Features of a Strong ASAM Solution

A reliable ASAM deployment requires supervised compatible Apple devices, an authorized ASAM-capable app, and properly tested app-side session handling; multi-OS management is optional. It is not enough to just lock the screen; you must manage the entire lifecycle of the device.

Centralized Kiosk Policy Management

Admins must be able to define which apps are ASAM-supported across the entire fleet. Hexnode allows you to deploy these policies remotely to specific device groups at scale.

App-Based Trigger Control

Since ASAM depends on app-initiated lockdown, administrators must add an ASAM-supported app to the Hexnode ASAM policy. This authorizes the selected ASAM-supported app to enter and exit Single App Mode autonomously.

Remote Troubleshooting and Monitoring

Large deployments require admins to monitor device health from a central dashboard. Hexnode allows administrators to configure and manage ASAM policies centrally, while the authorized app controls when the device enters or exits ASAM.

Multi-OS Device Support

Many enterprises manage mixed fleets including iOS, Android, and Windows. A unified platform like Hexnode simplifies IT operations by managing all kiosk types from a single console.

10 best iPad kiosk software for businesses

Why use Hexnode for ASAM

Hexnode UEM supports Autonomous Single App Mode on supervised iOS devices running iOS 7.0 or later. We understand that modern IT requires both security and flexibility.

Unified Kiosk Management

Hexnode allows organizations to manage iOS, Android, and Windows kiosk devices from a single console. This reduces the complexity of managing a multi-OS environment.

Rapid Global Deployment

Policies can be deployed over the air to assigned devices, users, or device groups through the Hexnode UEM portal. This is essential for universities and retail chains with vast hardware footprints.

Enterprise-Grade Security

Hexnode supports supervised device management and allows administrators to authorize ASAM-compatible apps through kiosk policies. Hexnode helps administrators configure and manage kiosk policies for supported devices.

Step-by-Step Guide: Setting Up ASAM with Hexnode

Setting up ASAM involves adding an ASAM-supported in-house, store, or VPP app to a Hexnode kiosk policy. This authorizes the selected app to enter and exit Single App Mode autonomously. Follow these steps to ensure a successful deployment.

Create a New Policy – Navigate to the Policies tab in the Hexnode portal. Click on New Policy and give it a clear name. Select Kiosk Lockdown > iOS > Autonomous Single App Mode.

Configure the ASAM App – Click Configure and then select + Add App. You can add App Store apps, Enterprise apps, or VPP apps from your inventory. Select an ASAM-supported in-house, store, or VPP app from the Hexnode inventory or Public Store.

Deploy to Target Devices – Assign the policy to your specific devices, users, or device groups. After the policy is delivered to the device, the authorized app can use Autonomous Single App Mode.

Comparing Modes: Flexibility vs. Rigidity

When configuring kiosks in the Hexnode portal, the decision usually comes down to how much control you want the UEM to have versus the app itself. Understanding the nuances between Single App Mode and Autonomous Single App Mode (ASAM) is key to a seamless user experience.

Single App Mode represents the “Rigid” approach. It is an iron-clad lockdown where the iPad is effectively a single-function tool. If the device reboots, it launches straight back into that specific app. This is perfect for permanent retail displays or information kiosks where you never want a user to see the home screen.

Autonomous Single App Mode, by contrast, offers “Flexibility.” It allows the iPad to remain a versatile tool for employees – capable of checking email or browsing internal resources – until a high-stakes event occurs (like a student opening an exam or a patient starting a digital intake form). Only then does the “lock” engage.

Real-World Enterprise Use Cases for ASAM

Organizations across various sectors use ASAM to balance security with device utility. Here are few deep-dive examples of ASAM in action.

The Digital Classroom

A school district manages 5,000 iPads for student use. During the day, students use them for research and creative projects. At 10:00 AM, the “State Math Exam” app is opened. The iPads lock down automatically, preventing students from exiting the test. At 11:30 AM, the test ends, and the iPads return to normal.

The Modern Clinic

A dental clinic uses iPads for digital check-ins and x-ray viewing. When a patient arrives, the check-in app triggers ASAM. ASAM prevents the patient from switching to other apps, while application-level access controls must prevent the patient from viewing the clinic’s internal records. Once the form is submitted, the iPad is handed back to the staff. It then unlocks for the next clinical task.

High-Traffic Retail

A car rental agency uses iPads for signing digital rental contracts. ASAM ensures the customer only interacts with the legal agreement. It prevents them from accidentally closing the app or opening the camera. This speeds up the check-in process and protects user data.

Best Practices for ASAM Success

Implementing ASAM correctly requires careful planning of device policies and user workflows. Reliable deployments require a mix of smart app logic and UEM rules.

• Choose Compatible Apps: Confirm your application supports programmatic locking and triggers exit events properly.
• Pilot Testing: Always test workflows before large-scale deployments to prevent issues during critical events like exams.
• Use Device Groups: Simplify management by applying policies to groups rather than individual devices.
• Monitor Remotely: Use the Hexnode dashboard to ensure security, compliance and remote management of your fleet.

Conclusion

Autonomous Single App Mode is redefining how organizations deploy secure, task-focused iOS kiosks. By allowing apps to dynamically control device lockdown, ASAM enables secure exams, seamless self-service, and flexible workflows.

With Hexnode UEM, IT teams can easily configure ASAM and iPad lock-to-one-app deployments across large device fleets. Whether you are managing a school district or a global retail brand, Hexnode provides the tools to succeed.