>
    Strata Copilot
    Use the Prisma Agent App for iOS (Unmanaged Devices)
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Dynamic Privilege Access
    5. Use the Prisma Agent for iOS to Access Your Projects
    6. Use the Prisma Agent App for iOS (Unmanaged Devices)
    Download PDF
    Prisma Access

    Use the Prisma Agent App for iOS (Unmanaged Devices)

    Table of Contents

    Use the Prisma Agent App for iOS (Unmanaged Devices)

    Use the Prisma Agent App on unmanaged devices.
    Where Can I Use This?What Do I Need?
    • Prisma Agent 26.4
    • iOS 16 and later versions
    • Internet access
    To connect the app to the unmanaged devices, you must complete the following steps.
    After a first-time installation, the Prisma Agent does not automatically connect to Prisma Access, even if your administrator configured Always On mode. After this first login, Always On mode takes effect and the agent connects automatically on subsequent logins.
    Each server address supports only one signed-in user at a time. If a different user needs to sign in on the same server, they must re-enroll: enter an incorrect server address and tap Continue to clear the current enrollment, then re-enter the correct server address and complete enrollment.
    1. Open the Prisma Agent app by tapping the Prisma Agent app icon (
      ).
    2. Read the disclosure about the information Prisma Agent may collect or access on your device and click Continue to acknowledge and accept the message.
    3. Enable Prisma Agent notifications on your endpoint. A notification permission dialog appears on the app. Allow Prisma Agent to send you notifications.
      If you Don’t Allow Prisma Agent to send you notifications, you will not receive any alert or notification when you face any issues related to app connectivity.
    4. Enter the server address that you have obtained from your IT administrator and the connection is initiated automatically.
      If you're unable to connect and need to share logs with your IT administrator, tap ? in the top-right corner of the enrollment page. This opens a share sheet with a log archive that you can share via AirDrop, Messages, Mail, or other apps.
    5. Allow Prisma Agent to add the VPN configuration to your endpoint. This setting enables Prisma Agent to provide secure access for your device.
    6. Enter the credentials that you use to authenticate and access the iOS devices such as password, passcode, biometric credentials and so on. For example, enter the iPhone passcode to authenticate to the device.
    7. Enter the project name that your administrator provided and tap Continue.
      The project name is case-sensitive and can be up to 32 characters. After your first login, the app displays your authorized projects as a list so you can select rather than type.
    8. Enter your organization credentials to authenticate to the app.
      If your administrator configured Prisma Agent to use the default system browser for SAML authentication, your default browser — such as Safari — opens instead of the embedded browser. After you authenticate, tap Open in the prompt that appears to return to the Prisma Agent app.
      After authentication is complete, the connection is established and the app displays the status as Connected.
    9. Tap Disconnect on the app when you no longer need to access the resources through Prisma Agent.

    © 2026 Palo Alto Networks, Inc. All rights reserved.