Category filter

How to configure iOS Web app kiosk?

Web apps are shortcuts to specific URLs. The URL can be that of a website, file or location. Administrators can configure Web app kiosks on iOS devices to restrict the end-users to a few approved web apps. The users will be able to access only the web apps added by the admin.

In Hexnode, web pages can be provisioned in kiosk mode using the web app kiosk policy. The websites added as web apps in the device can be opened in Safari or the Hexnode Browser Lite. Hexnode Browser Lite can also ensure unrestricted access to the approved external links within the web apps.


Works for supervised iOS 9.3 and later.

Add web app into the app inventory

To add web apps into the app inventory:

  1. Log in to your Hexnode console and navigate to the Apps tab.
  2. Click on +Add Apps and choose the “Web App” option from the dropdown list.
  3. Assign a suitable name, URL, and app icon for the web app and select a category for the same. Tap on Add.
  4. Adding iOS web apps in Hexnode for locking it in kiosk mode


  • To ensure that your app icons are clearly visible on the device and the Hexnode portal, use square-shaped images with device-specific dimensions.
  • For specific websites, device and user info can be passed along with the URL to iOS devices. Include wildcards in the URL in the format: “myURL”/“wildcard”.
    e.g.: “myURL”/% devicename%/%imei%/%serialnumber%.

    This exempts the IT administrator from configuring individual web apps specific to each device or user.

  • The end-user will be able to access all the paths of the whitelisted sites. For instance, if the site is whitelisted in the web kiosk, the user can access,, etc.

Web Apps URL Format:

The following are the supported URL formats for web apps that can be added in Hexnode web app kiosk mode,

  • Website: https://url/ or http://url/
  • PDF: https://url/ or http://url/
  • Location:
  • YouTube: https://youtubeurl/
  • iTunes: itms-apps://itunes url with app id/ (For example, itms-apps://
  • FTP: ftp://url/
  • Shared Documents: shareddocuments://url/

Create a web app kiosk policy

To restrict the target devices to a set of whitelisted websites,

  1. Go to the Policies tab and create a New Policy or choose to continue with an existing policy. Assign a suitable name and description for the policy if you are creating a new one.
  2. Under Kiosk Lockdown > iOS Kiosk Lockdown, choose the “Web App” option. Tap on Configure.

Open the web app using Safari in kiosk lockdown mode

To open the iOS web apps in kiosk mode using Safari,

  1. Select Safari from the “iOS Web App Kiosk” policy.
  2. Click on the + icon and select the desired web apps.
  3. Click on Done.

The websites added as web apps in the iOS kiosk mode can be accessed using Safari. These web apps will appear as bookmarks in the browser.

Open web app using Hexnode Browser Lite in kiosk lockdown mode

Hexnode Browser Lite is a single-tabbed browser that provides access to the websites added as web apps in the kiosk mode. Hexnode Browser Lite can be used to access web apps in single and multi-web app kiosk policy.

To open a single web app using Hexnode Browser Lite,

  1. Choose Hexnode Browser Lite > Single web app kiosk in the “Web App Kiosk policy”.
  2. Click on the + icon to select the web app.
  3. To access an external link within the web app, add the link in the Whitelist websites field. The user will be blocked from accessing anything other than the whitelisted links.

To open multiple web apps using Hexnode Browser Lite,

  1. Choose Hexnode Browser Lite > Multi web app kiosk in the “Web App Kiosk” policy.
  2. Choose the device layout as either iPhone or iPad. The apps that you configure in iPhone will get automatically selected in iPad as well and vice versa, but not the wallpaper.
  3. Click on the + icon to select the web apps to be set in kiosk mode and click Done.
  4. Click on the Select Wallpaper icon to set a custom wallpaper.
  5. Click on Choose file to upload a PNG file and select the image. You can directly select the image if you have already uploaded the file in Hexnode.
  6. Click on Save.
  7. Add the URLs to be whitelisted in the Whitelist websites section. The users can access only these whitelisted external links within the web app. All other websites will be blocked on the device.

Configuring Advanced Kiosk Settings

Hexnode provides a set of advanced kiosk settings that can be pushed to devices as per requirement. These advanced settings are only applicable on devices running iOS 9.0 and above.

Advanced Kiosk Settings
Category Settings Description
Kiosk Settings
Touch This option, when unchecked, would disable the touch screen on the device. However, Assistive touch will not be disabled.
Device rotation This option, when disabled, would prevent screen rotation on the device.
Volume buttons This option, when disabled, would prevent the users from altering the device volume.
Ringer switch This option, when unchecked, would disable the ringer switch.
Sleep wake button This option, when unchecked, would disable the sleep/wake button on the device.
Auto lock This option, when disabled, will not let the device go to sleep automatically after an idle period.
VoiceOver Enabling this option would turn on VoiceOver functionality on the device.
Zoom Enabling this option would turn on Zoom on the device.
invert colors Enabling this option would turn on the Invert colors option on the device.
AssistiveTouch If enabled, AssistiveTouch is turned on.
speak selection Enabling this option would turn on Speak Selection option on the device.
Voice Control For iOS 13.0+ devices, this option when checked, will enable Voice Control feature that can help control the device using voice.
Mono Audio This option, when checked, will enable Mono Audio which combines stereo audio from both speakers into a single channel. Enabling Mono Audio will disable spatial audio on the device.
User Enabled Options
VoiceOver Enabling this option would allow VoiceOver adjustments.
Zoom Checking this option will allow the user to manually enable/disable the Zoom option.
Invert colors Enabling this option would allow the users to activate or deactivate Dark mode on the device.
AssistiveTouch Enabling this option would allow AssistiveTouch adjustments.
Voice Control For iOS 13.0+ devices, this option when checked, users can enable/disable Voice Control in the device.

Use Advanced Website Kiosk Settings to configure additional customizations for the Hexnode Browser Lite.

  • iTunes music file links created using iTunes Link Maker can be opened in Web App kiosk mode using Safari browser only.
  • FTP site links added as Web Apps can only be accessed using Safari on the Web App kiosk mode.

Associate policy with target entities in Hexnode

If the policy has not yet been saved,

  1. Navigate to Policy Targets.
  2. Click on +Add Devices.
  3. Select the devices and click OK.
  4. Hit on the Save to apply the policies to devices.

If the policy has been saved,

  1. From Policies, check the policies to be associated.
  2. Click on Manage > Associate Targets and select the device.
  3. Click on Associate to apply the policy to the devices.

Apart from devices, you can also associate the policies with device groups, users, user groups, and domains from Policy Targets.


  • If ‘Camera & Microphone access permission’ is disabled for the Hexnode MDM app on the device settings, the user will not be able to access the camera/microphone on the web-app kiosk configured with Hexnode Browser Lite.
  • While in kiosk mode, users cannot forcefully grant Camera & Microphone access permission for the Hexnode MDM app. This permission must be turned-on to upload images/files from the device’s photo library. If otherwise, the device must be exited from the kiosk for the user to change the permission settings on the device manually.

  • Kiosk Lockdown of Devices