Initially, Enterprise Management Mobility (EMM) vendors offered two methods for incorporating their libraries into mobile apps: app wrapping or native SDK integration. Strategy customers have used both options. Strategy initially chose to develop native support on iOS for AirWatch, MobileIron and Good Dynamics as these three vendors are the leaders in the market and we received the most demand for these products from customers. Strategy customers using these EMM solutions can integrate Strategy natively by leveraging one of the three EMM specific Mobile SDKs Strategy has released.
As of the release of Strategy 10.6, Strategy is moving towards an AppConfig based strategy for Mobile EMM based deployments. Refer to KB319511 for more information.
App Wrapping
App wrapping is often a very viable solution and it works for many customers, but unfortunately Strategy doesn’t have a way to code, debug or fix any issues that might occur when using a wrapper, as the EMM vendor owns the wrapper code. As such, we can’t provide resolution support to customers using this deployment method. This dilemma affects all other mobile app vendors, not just Strategy.
AppConfig
The good news is Apple has recently opened up EMM APIs on the device which has enabled Strategy to work on a solution that will help customers. Our approach to supporting EMMs has shifted from vendor specific SDK level integrations to a standards based approach leveraging AppConfig (ACE) guidelines (https://www.appconfig.org/). The AppConfig guidelines utilize native EMM APIs for iOS and Android mobile platforms and don’t rely on an EMM vendor specific SDK. The AppConfig-compliant Strategy Mobile application for iOS is available as of Strategy 10.5, distributed as the standard iOS SDK download. Strategy has implemented these guidelines in the Android SDK for Strategy Mobile 10.7.
Note on Feature Support: To determine what features Strategy Mobile secured by Good Dynamics, AirWatch or MobileIron supports, check the MSDZ Mobile SDK Documentation. If the feature desired is not listed, check with the 3rd party EMM provider to determine whether the desired feature is supported in their respective SDK. If the 3rd party EMM provider does support the desired feature, proceed to log an idea on our Idea Exchange (sample subject line: "Support feature X with Strategy Mobile version Y secured by EMM Z"). If the 3rd party EMM provider does not support the desired feature, proceed to log the enhancement with that respective EMM provider.
EMM integration support:
EMM/MDM | iOS | Android | ||||
SDK | AppConfig | Wrapper | SDK | AppConfig | Wrapper | |
Good Dynamics | No | No | No | |||
AirWatch | No | No | ||||
MobileIron | No | No | No | |||
IBM MaaS360 | No | No | No | No | ||
Note: Where a Strategy Mobile version is specified, the capability was introduced to and is available from that version or newer.
iOS and Xcode version certification:
EMM | OS and Xcode version |
Good Dynamics for iOS | Check respective version Readme |
AirWatch for iOS | Check respective version Readme |
MobileIron for iOS | Check respective version Readme |
EMM feature support for iOS:
| EMM | |||
Feature | Description | Good Dynamics | AirWatch | MobileIron |
Provisioning and authentication | Adds an additional MDM specific authentication, e.g. PIN with configurable security settings. This is in addition to the authentication required by our application. | Yes | Yes | Yes |
Data leakage | Controls to govern whether data can be transmitted, shared, or copied outside of the application ecosystem. | Yes | Yes | Yes |
Application ecosystem | Allows data to be transmitted to other applications in the MDM ecosystem (i.e. other applications that integrated with the MDM SDK) in a secure manner. For example, Good for Enterprise is an iOS application we can securely transmit data. | Yes | N/A | No |
Tunneling | Automatically encrypt network communications using a secure tunnel (usually HTTPS). | Yes | Yes | Yes |
Data Encryption | Ensure that all persisted data (usually our data caches) are automatically encrypted on the device. | Yes | No | Yes |
Single sign on (SSO) | Integrates the MDM authentication into our workflow. | No | No | No |
Logging | Log messages to the MDM. | No | No | No |
Additional notes on feature support: