iAdmin Android App
Install and use iAdmin for secure Admin-panel access, social login, 2FA, permission-aware work, and push alerts.
Install and use iAdmin for secure Admin-panel access, social login, 2FA, permission-aware work, and push alerts.
On this page
iAdmin is the native Android operations client for the ISPbills Admin panel. Its role-aware screens use the same server-side permissions, subscription checks, and tenant scope as the web workspace.
Download and requirements
iAdmin requires Android 8.0 or later. Download iadmin.apk from either:
- Get iAdmin for Android on the ISPbills operator sign-in page.
The link serves signed production build 4.0 at https://app.ispbills.com/downloads/iadmin.apk?v=4.0.0. If Android blocks the APK, permit installs for the browser or file manager used to open it, then retry. Do not use an APK copied from an unknown source.
Sign in
Use one of these methods:
- enter an email, Admin ID, or mobile and password;
- select Continue with Google to approve the existing Admin account in the secure browser;
- select Sign in with a passkey to use a passkey saved for
app.ispbills.com; or - select Continue with Facebook to use the secure browser flow.
Passkey sign-in uses Android Credential Manager and the verified app.ispbills.com association. Google and Facebook use the provider’s secure browser flow and return through the verified https://app.ispbills.com/iadmin/auth/callback app link, with iadmin://auth/callback as a fallback. The short-lived approval code is exchanged once for device-bound app tokens. Social methods only connect to an existing active Admin account. The selected method must be enabled in ISPbills, and a passkey must first be registered on the web sign-in page. Card-distributor and reseller-partner accounts cannot enter the Admin workspace; reseller partners should use iPartner.
The password flow sends credentials directly to the protected Admin mobile API. On success, the server issues a short-lived access token and a rotating refresh token bound to that app installation. The password and one-time social approval code are never stored; session material is encrypted with a non-exportable Android Keystore key.
Workspace and permissions
The bottom bar opens up to five role-focused destinations, with the remaining authorized workspaces under More. Customer detail provides confirmed suspend, reconnect, renew, invoice-generation, and active-session disconnect actions. Team profiles let an authorized Group Admin suspend or reactivate operators and staff. Router and OLT details provide a confirmed, approval-referenced reboot action for users with network-change permission. Support includes ticket status, priority, public reply, and internal-note actions.
What a user can see or change is determined by the signed-in role and server-side permissions. A shortcut can still return 403 Forbidden when the account lacks that permission. Business-event push alerts are intentionally delivered only to active Group Admin owner accounts, even though other authorized staff can use iAdmin.
Select Sign out under Settings to revoke the device session and erase its local credentials. An invalid or expired refresh token returns the app to sign-in.
Push alerts and deep links
Allow notifications when Android asks. After native sign-in, iAdmin registers the installation with ISPbills. Current business alerts are:
| Channel | Events |
|---|---|
| New subscriber signups | A customer record is created |
| Invoice updates | A subscriber invoice is created |
| Support updates | A public customer ticket is created, its status changes, or the customer replies |
Tapping an alert opens its protected native customer, billing, or support destination. Unrecognized paths are rejected instead of being treated as customer records. Internal support notes are not customer-reply alerts.
Device access and privacy
iAdmin requests internet/network access and Android notification access. Cleartext HTTP and Android backup are disabled. The app keeps device-bound session credentials in Android Keystore-backed encrypted storage.
The app can expose every Admin page the account is permitted to use. Protect the phone with a screen lock, do not share downloaded customer or financial files, and sign out before transferring the device.
Troubleshooting
| Problem | Resolution |
|---|---|
| Admin ID or password is rejected | Use the numeric Admin ID, registered email, or registered mobile. Confirm the account is active and is not a card-distributor or reseller-partner account. |
| Google sign-in fails | Confirm Google is enabled, the selected Google email belongs to an existing Admin account, and Google Play services are current. |
| Facebook does not return to iAdmin | Confirm Facebook is enabled, its email belongs to an existing Admin account, and Android permits the verified app.ispbills.com link to open in iAdmin. |
| No passkey is available | Register a passkey for the Admin account on the web sign-in page first, enable a phone screen lock, and ensure the same Google Password Manager is available on the device. |
| The social approval expired | Start Google or Facebook sign-in again. The approval code is single-use and expires after three minutes. |
| A menu item returns 403 | The signed-in role lacks the server-side permission. Ask the Group Admin to review the staff role rather than reinstalling the app. |
| No push alerts arrive | Enable iAdmin notifications, sign in and load an Admin page, then confirm the account is the active Group Admin owner. Push sending also requires working server Firebase credentials and a queue worker. |
| Can’t reach ISPbills | Check Wi-Fi/mobile data and app.ispbills.com, then select Try again. There is no offline mutation queue. |