Deferred Profile assignment?
I have the exact same request and a couple of additional suggestions, check out my post here:
Yeah, just thought I would send up one more flare in case anyone had come up with something recently...
Check out the possibility of a deferred APK update via a install script set to launch at startup:
That would potentially work for install on boot, we just need more than that. I have been using that method to install apps already using mx to get around the permissions issue. I do a copy/rename then call mx to install the app.
Since a device can't be in more than one group and you can't apply profiles to virtual groups...
Currently, we are creating a custom attribute for each application. The profiles have a filter criteria to match a version string in the custom attribute. We create and maintain device lists, device groups and custom attributes in an external database. We have to build version logic in to our applications that on logoff, the version is checked and if not current, triggers a back-end process to use the REST API to update the custom attribute for the device and then trigger a check-in, which then causes the previous profile to be removed and the new profile to be assigned at that point.
A PITA to be sure but currently the only workable mechanism available to us.