MobileIron loads two VPN configurations and the MobileIron Tunnel app onto enrolled iOS devices, all of which need to be present and setup correctly.

Confirm the presence of the Tunnel app.

If the user is unable to locate the app, they can confirm it's presence or lack using iOS's built in search tools. 
(Apple provides instructions for using the search tool here: https://support.apple.com/en-us/HT201285)

If the Tunnel app is missing, the device may not be enrolled or may need to be re-enrolled. See KB0038180 - Verifying a MobileIron enrollment

Confirm the presence of the VPN configurations.

Open the Settings app.

Select General

Select VPN (4th or 5th from the bottom)

There should be 2 items listed: "Per-App VPN Tunnel" and "Safari Web Tunnel"

If VPN configs are missing, the device may not be enrolled or may need to be re-enrolled. See KB0038180 - Verifying a MobileIron enrollment

Select each VPN in turn and verify that "Connect on Demand" is enabled.

Go to KB0038305 in the IS Service Desk

Related articles