Single-app kiosk mode is the right configuration for many customer-facing device deployments. A self-ordering kiosk runs one ordering application. A digital menu board runs one signage player. A visitor management terminal runs one check-in application. Locking the device to that single application eliminates every possible path to unintended navigation and provides the cleanest possible customer-facing experience.
But some kiosk deployments do not fit this model. The intended customer experience requires access to more than one application, and those applications cannot be combined into a single app without custom development that is not feasible for every organization. The answer for these deployments is multi-app kiosk mode, which extends the lockdown model to allow access to a defined set of approved applications while still preventing navigation to anything outside that set.
Understanding when multi-app kiosk mode is the right configuration, how it differs from single-app mode, and how to configure it correctly through Moki’s MDM platform is the foundation for kiosk deployments that need more flexibility than single-app lockdown provides without sacrificing the security and consistency that kiosk management requires.
What Multi-App Kiosk Mode Is
Multi-app kiosk mode restricts a managed device to a defined set of approved applications. Unlike single-app mode, which limits the device to exactly one application at the OS level, multi-app mode creates a controlled environment where users can access any application in the approved set but cannot navigate outside it to the device’s full application library, system settings, or any other unapproved application.
The degree of restriction in multi-app mode varies by platform. On iOS with supervised mode, multi-app kiosk configuration through Moki restricts the device’s home screen to only the approved applications, prevents access to system applications and settings, and disables hardware features that are not required for the intended use case. The user sees a simplified interface with only the approved application icons available.
On Android devices enrolled through Android Enterprise, multi-app kiosk configuration through Moki creates a managed home screen that displays only the approved application set, with all other applications and system functions inaccessible. The lockdown is enforced at the Device Owner level, making it as robust as the single-app mode alternative for Android.
In both cases, the user experience is a device that feels purpose-built for its approved application set, with no visible path to anything outside those applications. The difference from the user’s perspective compared to single-app mode is that they can switch between the approved applications without requiring any action from IT.
Use Cases That Require Multi-App Kiosk Mode
The use cases that drive multi-app kiosk deployments share a common characteristic: the customer or user experience is more complex than a single application can support, but the device still needs to be restricted from general-purpose use.
Employee-facing shared devices in retail and hospitality environments are a common multi-app scenario. A retail associate device might need access to the inventory lookup application, the clienteling application, and the payment processing application, all of which are separate applications that serve different steps in the associate’s workflow. Locking the device to one of these applications prevents the others from being used. Allowing full device access introduces all the risks of unmanaged device use. Multi-app kiosk mode provides the middle ground.
Patient check-in and healthcare workflow tablets often require access to both the check-in application and a wayfinding or patient education application. Combining these into a single application requires custom development. Multi-app kiosk mode allows the healthcare organization to deploy the existing approved applications in a restricted environment without requiring either application to be modified.
Field service and inspection devices need access to the inspection recording application, the parts catalog or documentation application, and potentially a communication application for coordination with supervisors. These are typically separate applications that cannot reasonably be combined, and they need to be accessible without allowing the device to be used for personal browsing or entertainment during working hours.
Loyalty enrollment and customer engagement kiosks in retail environments may need to run the loyalty enrollment application alongside a product information or promotional browsing application. The customer flow moves between both applications, making single-app mode impractical without combining the functionality into one custom-built app.
How Multi-App Kiosk Mode Differs From Full Device Access
The critical distinction that multi-app kiosk mode provides is the boundary between the approved application set and everything else. A device in multi-app kiosk mode looks and behaves differently from a device with full access even when both have access to the same approved applications.
On a device with full access, a user who exits an approved application lands on a home screen that shows all installed applications and from which they can access device settings, install new applications, access the browser, or connect to personal accounts. The approved applications are available, but so is everything else.
On a device in multi-app kiosk mode, a user who exits an approved application lands on the managed home screen showing only the other approved applications. There is no path to unapproved applications, no access to device settings, no browser, no ability to install applications, and no connectivity to personal accounts. The boundary is enforced at the OS level through Moki’s Device Owner or supervised mode configuration, making it as robust as single-app mode for the specific restriction it provides.
Configuring Multi-App Kiosk Mode in Moki
Multi-app kiosk configuration in Moki’s platform is managed through the device configuration profile and applied to device groups just as single-app mode would be.
For iOS devices, the multi-app kiosk configuration specifies which applications are allowed on the managed home screen, which system applications such as Phone, Settings, or Safari are allowed or blocked, which hardware features are accessible, and how the device behaves when no app is in the foreground. Applications not included in the approved list are not visible on the device. The configuration is applied to supervised iOS devices through Moki’s integration with Apple Business Manager.
For Android devices, the multi-app kiosk configuration specifies which applications appear on the managed launcher that replaces the standard Android home screen, how the managed launcher is visually organized, which system settings are accessible, and which hardware features are enabled or disabled. Applications not on the approved list are installed but hidden from the managed launcher and inaccessible to the user. The configuration is applied through Android Enterprise Device Owner mode.
The approved application list should be reviewed and intentional. Every application included in the multi-app set represents a potential path to content and functionality that the device owner is choosing to permit. Applications that are approved for business use but not appropriate for customer-facing access, such as a business email client or a general-purpose browser, should not appear in the approved set for a customer-facing multi-app kiosk deployment.
Monitoring Multi-App Kiosk Deployments
Moki’s monitoring capabilities work the same way for multi-app kiosk deployments as for single-app deployments. Device health, online status, application performance, and configuration compliance are all monitored continuously. Alert thresholds are configured for the operational importance of the specific device category.
For multi-app deployments where the Moki SDK is integrated into the approved applications, application-level events from each application in the approved set can be surfaced in the Moki dashboard, giving the operations team visibility into how the full approved application set is performing rather than just whether the device is online.
Compliance monitoring for multi-app deployments verifies that the managed home screen configuration is correctly applied, that no unapproved applications are accessible on the device, and that hardware feature restrictions are in the expected state. A device where the managed home screen configuration has been compromised or where a previously approved application has been removed from the device without corresponding removal from the approved list surfaces in the compliance report.
Schedule a Moki demo to see multi-app kiosk mode configured and demonstrated for your specific device type and use case, or start a free trial to begin building a multi-app kiosk configuration for your deployment. Moki’s support team can advise on whether single-app or multi-app kiosk mode is the right fit for each device category in your fleet.