How do I sell a business app when IT has to approve it?
Business users may love your app, but IT decides whether it's allowed on company devices.
- IT blocks our app.
- Do we need SSO?
- What do security questionnaires ask?
Prepare for IT before they ask: a security page, answers to common questionnaires, SSO with major identity providers, support for device management and app configuration, data encryption and clear data location. Offer a call with IT early in the deal. Track how long security review takes and which questions slow it down.
What IT checks
| Area | What they want |
|---|---|
| Identity | SSO, MFA, user provisioning |
| Devices | Device management, app configuration |
| Data | Encryption, location, retention |
| Compliance | Security reports or certifications |
| Access | Roles and audit logs |
How we look at it at ShoutEx
We build security pages and questionnaire answer libraries, and our developers help with SSO and device management support. Automating security questionnaires covers answer libraries.
- No security page.
- No SSO.
- IT involved at the end.
- Answers written from scratch every time.
- Security page.
- SSO and device management support.
- Early IT call.
- Answer library.
What developers and the app stores say
Here is what IT teams and vendors say.
Apple's options for distributing apps to organizations.
Read Apple's page →Community summaries describe recurring themes in public threads, not individual posts. Vendor pages describe vendor claims, so test them on your own calls.
Read next
Go deeper in the ShoutEx guides, or check the sources behind this answer.
We'll build your security page and answer library.
Book a call →Follow-up questions
Do we need SOC 2?
Larger buyers often ask. Smaller ones accept a security overview.
Which SSO providers?
Microsoft Entra ID, Okta and Google are common.
What about BYOD?
Support app-level controls for personal devices.