Last Updated: January 2016

WSO2EnterpriseMobilityManager2.0.0

Technical Lead Prabath Abeysekara

Overview

◉  What’sEnterpriseMobilityManagement?

◉  WSO2EMMasacomprehensivesuitefor“EnterpriseMobilityManagement”

◉  What’snewinWSO2EMM2.0.0?◉  What’sinthepipeline?-HeadsuptoEMM2.0.1and

EMM2.1.0◉  Q&A

2

EnterpriseMobilityManagement

“An organized collection of tools, technologies, processes and policies used to securely manage and maintain the use of mobile devices within an

organization.”

3

KeyChallengesinEMM

◉ Whatdevicestobeallowed?o  BYOD?orCOPE?orBoth?◉ Howtoprovisioncorporatedataandresourcessecurely?◉ WhatdeviceplaNorm(s)tobeused?

◉  HowextensibleistheadopRngEMMinfrastructuretosupportnewdeviceplaNorms?

4

KeyChallengesinEMM

◉  Notpayingforbuyingdevices,butspendingthatmoneyformanagingthedevices?

◉  HowtomakeenterpriseandpublicapplicaRonsreadilyvisiblewithintheenterprisewithpropercontrol?

◉  Howtoenforcemonitoringandgovernance?

5

WSO2EnterpriseMobilityManager

EnterpriseMobilityManagementsoluRonwitha

MobileApp-Storegearedwith

Enterprise-wideAppSecurity,

comprehensiveMonitoringcapabiliRes,supporRngthecompletelifecycleofdeviceandapplicaRon

management.

6

KeyBenefits-OperaDonal◉ Compose,enforceandmanagegranularlevelsecuritypoliciesforindividuals,groupsanddevicesbasedonroleorworkstyle.

◉ AbilitytomakestrategicdecisionswithdatagatheredthroughallacRviResoverasimple,cleaninterfaceandpowerfuldashboardswithanalyRcsandreporRng.

◉ StrengthenbusinessesthroughsecureaccesstoinformaRonviadataencrypRon,passcodeenforcement,etc.

7

KeyBenefits-OperaDonal

◉ Userscanselectthedevicesthatbestmeettheirindividualneeds,includingpersonally-owneddeviceswhiletheysRllbeingmanagedoveracentralizedenRty.

◉ EnableemployeestobeabletobemoreefficientandforfasterdecisionmakingviaembracingconceptssuchasBYOD.

8

KeyBenefits-Financial

◉ Getridofunappealing“pay-per-device”pricingmodels.

◉ Ifyou’vegotin-houseexperRse,Download-Deploy-Runtheserversatabsolutelynocost.

◉ EmbraceBringYourOwnDevice(BYOD)andsavetheenterprisedeviceprocurementanddataplancostsassociatedwitheachuser.

9

WSO2EMM2.0.0

What’sNEW?

10

RevampedArchitecture

◉  Builtupon“WSO2ConnectedDeviceManagementFramework”o  AnextensibleplaNormtopluginanyplaNorm

thatneedstobemanaged

◉  MulRplerecommendeddeploymentpa\ernsthatfitintoyourdeployment

◉  Richscalability

o  HorizontalandverRcalscalability

11

RevampedArchitecturecontd..

◉  Improved“separaRonofconcerns”o  SeparatedeploymentprofilestorunEMM

workers,EMMmanager,KeyManagersandEMMGateways

12

RevampedArchitecturecontd..

13

RevampedArchitecturecontd..

14

BackedbyvarietyofRDBMSs

◉  AllfuncRonaliResarebackedbyenterprisegrade

RDBMSs,

o  Oracle

o  MySQL

o  PostgreSQL,etc

15

ResponsiveUserInterface

◉  Userinterfaceisdesignedtodetectuser’sscreensizeandorientaRon

◉  Layoutsarechangedaccordinglytofitthedevices

16

ResponsiveUserInterface

17

SupportForWindowsDevices

◉  Supports“WindowsPhone8.0&8.1”◉  On-premiseandfederateddeviceenrolment◉  SupportedoperaRons:

o  DeviceLocko  EnterpriseWipeo  LockReseto  Ring

◉  SupportedPolicies:Passcodepolicy,RestricRonsoncamera,EncrypRonsecngs.

18

SupportForWindowsDevices

◉  WindowsDeviceEnrollmentFlow

19

SupportForWindowsDevicescontd..

20

1

2

3

4

5

6

EnhancedsupportforAndroid

◉  SupportsAndroid4.1.x-6.0(JellyBean-Marshmallow)

◉  SupportsthecompletestackofoperaRons,commonlyusedconfiguraRonenforcements

o  WificonfiguraRonso  EnterpriseWipeo  DeviceLocko  DeviceEncrypRonandmuchmore..

21

EnhancedsupportforiOS

◉  SupportforiOS-7,iOS-8andiOS-9◉  NewlysupportedoperaRons

o  AddcellularoperaRonso  AddrestricRons(70differentoperaRons)o  Triggeralarmo  EnhancedwificonfiguraRonso  AddAirplayoperaRonso  CalDevsubscripRonso  EnhancedLDAPconfiguraRonso  Enhancede-mailconfiguraRons

22

EnhancedsupportforiOScontd..

◉  Othernewfeatureso  RetrieveinstalledapplicaRonso  Retrieveinstalledprofileso  RetrieverestricRonso  Installapp-lockpayloads

23

OperaDonsVsPolicies

◉  CleardemarcaRonsbetweendevicemanagementoperaRonsandconfiguraRonso  OperaRonsi.eDevicelock/Cameradisableo  ConfiguraRonsi.e.Wifi/PassCode

◉  ConfiguraRonsarepushedtodevicesviapolicies◉  OperaRonsarepushedtodevicesmanualselecRon◉  Policyenforcementbasedonuser-role,device-

ownership,deviceplaNorm,etc

24

OperaDonsVsPoliciescontd..

25

NewPolicyManagementFramework

◉  EasytousepolicycomposiRonandenforcementwizard

◉  Prioritybasedpolicyenforcement◉  Policyenforcementover,

o  Userroleo  Deviceownershipo  DeviceplaNorm

26

NewPolicyManagementFramework

27

NewPolicyManagementFramework

28

RESTAPIsupport

◉  WelldesignedandcomposedRESTAPIsuponallkeydevicemanagementfuncRonaliRes

◉  AllAPIsarepublishedas“managedAPIs”uRlizingthesameplaNormcomponentsusedin“WSO2APIManager”

◉  AlldevicemanagementRESTAPIsareOAuth

protected

29

RoleBasedAccessControl

◉  IdenRfydifferentgroupsintheorganizaRono  i.e.ITOperator,ServerAdministrator,Manager,

etc

◉  Separatepermi\edfuncRonaliResupontheirrespecRvebusinessrolewithintheorganizaRon

◉  Fine-grainedpermissionmodelforthosewhowishto

adoptschemssuchas“POLP”

30

UIWhite-labeling

◉  AimedataudienceswhowishtocustomizethelookandfeeloftheEMMend-userapp

◉  Welldesignedplace-holdersformostcustomizableelements.i.e.logo,etc.

31

AppManagementImprovements

◉  Unifiedappmanagement-Supportswebappsandmobileapps(iOS,Android,Windows)

◉  SecurityManagement

o  Single-Sign-On(SSO)o  Role-basedUserAuthorizaRon–Public/Limitedo  Abilitypluganyuserrepository(MSAcRveDirectory,

LDAP,Database,etc)

32

AppManagementImprovements

◉  Policy-drivenAccessControlo  Manageanonymousaccesso  Thro\lingo  Managefine-grainauthorizaRon(viaXACML-based

policies)◉  CapableofacRngasacentralOAuthServerforallAPIs

o  ManageOAuthKeysonbehalfofappsofvariousproviders

o  ManageToken(validaRon/expiraRon)onbehalfofappso  AppwillonlyseeasingleOAuthprovider

33

AppManagementImprovements

◉  StaRsRcso  Variousstats(e.g.OverallSubscripRons,Usageby

Page/User,ResponseTime)o  LeveragesonWSO2BusinessAnalyRcsMonitor(BAM)

whichsupportsbatchandreal-Rmedataprocessingo  Capableofextendingtothird-partyanalyRcsengines

(e.g.GoogleAnalyRcs)

34

What’sintheplateforQ1toQ3?

◉  EMM2.0.1o  BugfixreleasefollowedbyEMM2.0.0o  Carriesmanyfixesrelatedtouser-experience,

device&applicaRonmanagemento  Willbereleasedin2016-Q1

◉  EMM2.1.0o  AimedatproperlyimplemenRngBYOD-COPE

separaRonuponAndroid,iOSandWindowso  Willbereleasedin2016-Q3

35

Contactus!

Q&A

37