APIs and tools

The following APIs are available to help you develop your Android Enterprise solution.

Device and app management

Android Management API

You can use the Android Management API to integrate support for Android device and app management into your EMM console. The API and its companion DPC app, Android Device Policy, work together as a self-contained solution. For more information, see Development options.

Google Play EMM API

You can use the Google Play EMM API to integrate support for the following tasks into your EMM console:

  • Specify apps that users are allowed to download onto managed devices.
  • Host app APKs outside of Google Play. (Google Play hosts only the metadata for these APKs.)
  • Manage user licensees in bulk for paid apps.
  • Manage app installation.

The Play EMM API doesn't include device management features. To enforce management policies on devices, you need to develop your own DPC. For more information, see Develop a solution.

DPC development

For guidance on how to create a device policy controller (DPC) app, see Build a DPC.

A sample DPC app called Test DPC is available on Google Play. The code for Test DPC is available as an open source project on GitHub.

You can use Test DPC as a sample DPC or as a testing tool. As a testing tool, Test DPC provides an effective way to test applications and platforms in a managed context. For details, see the Test DPC readme file. To report an issue, use the Test DPC issue tracker.

When using Test DPC, keep the following in mind:

  • Building Test DPC requires Android SDK v23, Android Build Tools v23.0.1, and the Android support repository.
  • Test DPC supports devices running Android 5.0 Lollipop or later.
  • Test DPC uses the Gradle build system.

We recommend using Android Studio, which includes the latest SDK tools. If you use a different IDE, you can use Gradle on the command line.

Device enrollment

Zero-touch enrollment API

Zero-touch enrollment is a streamlined process for Android devices to be provisioned for enterprise management. On first boot, devices check to see if they’ve been assigned an enterprise configuration. If so, the device downloads the correct DPC, which then completes the setup of the managed device.

Zero touch's customer API allows you to support zero-touch directly in your EMM console, to help IT admins complete the following tasks:

  • Create, edit, and delete zero-touch enrollment configurations based on your mobile policies.
  • Set a default configuration so your DPC provisions future devices the organization purchases.
  • Apply individual configurations to devices or remove devices from zero-touch enrollment.

To learn more about zero-touch enrollment, read the overview.


Google Play Custom App Publishing API

The Google Play Custom App Publishing API lets your enterprise customers publish private apps (also called custom apps) to their managed Google Play store directly from your EMM console or IDE. The API eliminates the need for enterprise IT adminss to access the Google Play Console each time they publish an app, and also streamlines the publishing process.

Google Play services

The Google Play services APIs provide programmatic access to Google features. Google Play services provide a core Google experience on top of Android, and are responsible for Google Account authentication and providing policy restrictions for Google Accounts.

Google Play services don’t expose many enterprise APIs directly, but a few of the other packages (including those related to security, app state, authentication, utilities, and Drive events) are useful to app developers in the enterprise context.

Directory API

Use the Directory API to set up users’ managed accounts and synchronize their account information. For details, see Provision accounts.

The Directory API also lets you lets you programmatically manage Google user accounts for enterprise customers by doing tasks such as these:

  • Create and manage information and profiles for users, groups, and admins.
  • Approve and monitor devices.
  • Take action on lost devices; for example, by remotely wiping or blocking the devices.
  • Create custom user profiles.
  • Audit third-party applications to which your users have granted access.
  • Revoke unauthorized apps.

Admin Settings SDK

You can use the Admin Settings API to manage SSO settings for an enterprise's Google-managed domain. This is especially useful if you're using SAML. For details, see Managing Single Sign-On settings.