Last Updated: January 2016

WSO2 Enterprise Mobility Manager

2.0.0

Technical LeadPrabath Abeysekara

Overview

◉ What’s Enterprise Mobility Management?

◉ WSO2 EMM as a comprehensive suite for “Enterprise Mobility Management”

◉ What’s new in WSO2 EMM 2.0.0?◉ What’s in the pipeline? - Heads up to EMM 2.0.1 and

EMM 2.1.0 ◉ Q & A

2

Enterprise Mobility Management

“An organized collection of tools, technologies, processes and policies used to securely manage and maintain the use of mobile devices within an

organization.”

3

Key Challenges in EMM

◉What devices to be allowed?o BYOD? or COPE? or Both?

◉How to provision corporate data and resources securely?◉What device platform(s) to be used?

◉ How extensible is the adopting EMM infrastructure to support new device platforms?

4

Key Challenges in EMM

◉ Not paying for buying devices, but spending that money for managing the devices?

◉ How to make enterprise and public applications readily visible within the enterprise with proper control?

◉ How to enforce monitoring and governance?

5

WSO2 Enterprise Mobility Manager

Enterprise Mobility Management solution with a

Mobile App-Store geared with

Enterprise-wide App Security,

comprehensive Monitoring capabilities, supporting the complete life cycle of device and application

management.

6

Key Benefits - Operational◉Compose, enforce and manage granular level security

policies for individuals, groups and devices based on role or work style.

◉Ability to make strategic decisions with data gathered through all activities over a simple, clean interface and powerful dashboards with analytics and reporting.

◉Strengthen businesses through secure access to information via data encryption, passcode enforcement, etc.

7

Key Benefits - Operational

◉Users can select the devices that best meet their individual needs, including personally-owned devices while they still being managed over a centralized entity.

◉Enable employees to be able to be more efficient and for faster decision making via embracing concepts such as BYOD.

8

Key Benefits - Financial

◉Get rid of unappealing “pay-per-device” pricing models.

◉If you’ve got in-house expertise, Download-Deploy-Run the servers at absolutely no cost.

◉Embrace Bring Your Own Device (BYOD) and save the enterprise device procurement and data plan costs associated with each user.

9

WSO2 EMM 2.0.0

What’s NEW?

10

Revamped Architecture

◉ Built upon “WSO2 Connected Device Management Framework”

o An extensible platform to plug in any platform that needs to be managed

◉ Multiple recommended deployment patterns that fit into your deployment

◉ Rich scalabilityo Horizontal and vertical scalability

11

Revamped Architecture contd..

◉ Improved “separation of concerns”o Separate deployment profiles to run EMM

workers, EMM manager, Key Managers and EMM Gateways

12

Revamped Architecture contd..

13

Revamped Architecture contd..

14

Backed by variety of RDBMSs

◉ All functionalities are backed by enterprise grade

RDBMSs, o Oracleo MySQLo PostgreSQL, etc

15

Responsive User Interface

◉ User interface is designed to detect user’s screen size and orientation

◉ Layouts are changed accordingly to fit the devices

16

Responsive User Interface

17

Support For Windows Devices

◉ Supports “Windows Phone 8.0 & 8.1”◉ On-premise and federated device enrolment ◉ Supported operations:

o Device Locko Enterprise Wipeo Lock Reseto Ring

◉ Supported Policies: Passcode policy, Restrictions on camera, Encryption settings.

18

Support For Windows Devices

◉ Windows Device Enrollment Flow

19

Support For Windows Devices contd..

20

1

2

3

4

5

6

Enhanced support for Android

◉ Supports Android 4.1.x - 6.0 (Jelly Bean - Marshmallow)

◉ Supports the complete stack of operations, commonly used configuration enforcements

o Wifi configurationso Enterprise Wipeo Device Locko Device Encryption and much more..

21

Enhanced support for iOS

◉ Support for iOS-7, iOS-8 and iOS-9◉ Newly supported operations

o Add cellular operationso Add restrictions (70 different operations)o Trigger alarmo Enhanced wifi configurationso Add Airplay operationso CalDev subscriptionso Enhanced LDAP configurationso Enhanced e-mail configurations

22

Enhanced support for iOS contd..

◉ Other new featureso Retrieve installed applicationso Retrieve installed profileso Retrieve restrictionso Install app-lock payloads

23

Operations Vs Policies

◉ Clear demarcations between device management operations and configurations o Operations i.e Device lock/Camera disableo Configurations i.e. Wifi/PassCode

◉ Configurations are pushed to devices via policies ◉ Operations are pushed to devices manual selection ◉ Policy enforcement based on user-role, device-

ownership, device platform, etc

24

Operations Vs Policies contd..

25

New Policy Management Framework

◉ Easy to use policy composition and enforcement wizard

◉ Priority based policy enforcement◉ Policy enforcement over,

o User roleo Device ownershipo Device platform

26

New Policy Management Framework

27

New Policy Management Framework

28

REST API support

◉ Well designed and composed REST APIs upon all key device management functionalities

◉ All APIs are published as “managed APIs” utilizing the same platform components used in “WSO2 API Manager”

◉ All device management REST APIs are OAuth protected

29

Role Based Access Control

◉ Identify different groups in the organizationo i.e. IT Operator, Server Administrator, Manager,

etc

◉ Separate permitted functionalities upon their respective business role within the organization

◉ Fine-grained permission model for those who wish to

adopt schems such as “POLP”

30

UI White-labeling

◉ Aimed at audiences who wish to customize the look and feel of the EMM end-user app

◉ Well designed place-holders for most customizable elements. i.e. logo, etc.

31

App Management Improvements

◉ Unified app management - Supports web apps and mobile apps (iOS, Android, Windows)

◉ Security Managemento Single-Sign-On (SSO)o Role-based User Authorization – Public/Limitedo Ability plug any user repository (MS Active Directory,

LDAP, Database, etc)

32

App Management Improvements

◉ Policy-driven Access Controlo Manage anonymous accesso Throttlingo Manage fine-grain authorization (via XACML-based

policies)

◉ Capable of acting as a central OAuth Server for all APIso Manage OAuth Keys on behalf of apps of various

providerso Manage Token (validation/expiration) on behalf of appso App will only see a single OAuth provider

33

App Management Improvements

◉ Statisticso Various stats (e.g. Overall Subscriptions, Usage by

Page/User, Response Time)o Leverages on WSO2 Business Analytics Monitor (BAM)

which supports batch and real-time data processingo Capable of extending to third-party analytics engines

(e.g. Google Analytics)

34

What’s in the plate for Q1 to Q3?

◉ EMM 2.0.1o Bug fix release followed by EMM 2.0.0o Carries many fixes related to user-experience,

device & application managemento Will be released in 2016 - Q1

◉ EMM 2.1.0o Aimed at properly implementing BYOD - COPE

separation upon Android, iOS and Windowso Will be released in 2016 - Q3

35

Contact us !

Q & A

37