[BESAdmin-Announcements] BigFix MCM and BigFix Mobile v3.5: Expanding Device Management and Enhancing Security

[Announcements for BES Administrators]

*BigFix Mobile and Modern Client Management*

We are thrilled to announce the release of BigFix Modern Client Management
(MCM) and BigFix Mobile v3.5!

This release introduces ChromeOS device management, enhanced application
management controls, and expanded SAML authentication support strengthening
security, and simplifying operations for IT teams.
------------------------------

*New Features and Enhancements*

*ChromeOS Device Management*

BigFix MCM now supports management of *ChromeOS devices*, extending unified
endpoint management through integration with Google Workspace.

*Key capabilities include:*

·        Support for ChromeOS as a managed platform

·        Installation and management of the ChromeOS MDM Server and Plugin
via WebUI

·        Enterprise enrollment integrated with Google Workspace

·        ChromeOS device visibility in the *Devices* page

·        ChromeOS policy management:

o   Network policies

o   Restriction policies

o   Password policies

o   OS update policies

o   Organization Unit (OU)–based deployment

·        Remote device actions:

o   Restart

o   Wipe users

o   Remote powerwash

o   Unenroll

Plus Health checks and prerequisite scans for ChromeOS MDM services

*Remove App Policy*

BigFix MCM introduces a *Remove App Policy* that allows administrators to
uninstall previously deployed applications from managed devices.

*Supported platforms:*

·        Android

·        iOS

·        iPadOS

·        macOS

·        Windows

Administrators can deploy the Remove App Policy directly to devices or
through Policy Groups.

*VPP License Reclamation*

When removing Apple VPP applications:

1.     The application is uninstalled from the device.

2.     The associated VPP license is automatically revoked.

3.     The license is returned to the available pool for reassignment.

This ensures proper license tracking and prevents orphaned licenses.

*PingFederate SAML Authentication Support*

BigFix MCM now supports *SAML-based authentication using PingFederate* as
an Identity Provider (IdP).

This enhancement extends existing SAML integrations (such as Okta) and
enables secure single sign-on (SSO) aligned with enterprise identity
infrastructures.

For configuration steps and detailed guidance, refer to the BigFix MCM
documentation What’s new - Latest Features & Enhancements
<https://help.hcl-software.com/bigfix/11.0/mcm/MCM/Config/c_mcm_whatsnew.html>
 .
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20260225/7ee4864f/attachment.html>