This document provides an overview of WSO2 Enterprise Mobility Manager (EMM) 2.0.0, including what Enterprise Mobility Management is, the challenges it addresses, and WSO2 EMM's features. Key updates in 2.0.0 include a revamped architecture, support for Windows devices, enhanced support for Android and iOS, improved policy management, REST API support, and app management improvements. Planned updates include bug fixes in 2.0.1 and further BYOD/COPE separation support in 2.1.0.

1. Last Updated: January 2016
WSO2 Enterprise Mobility
Manager
2.0.0
Technical Lead
Prabath Abeysekara

2. Overview
◉ What’s Enterprise Mobility Management?
◉ WSO2 EMM as a comprehensive suite for “Enterprise
Mobility Management”
◉ What’s new in WSO2 EMM 2.0.0?
◉ What’s in the pipeline? - Heads up to EMM 2.0.1 and
EMM 2.1.0
◉ Q & A
2

3. Enterprise Mobility Management
“An organized collection of tools, technologies,
processes and policies used to securely manage
and maintain the use of mobile devices within an
organization.”
3

4. Key Challenges in EMM
◉ What devices to be allowed?
o BYOD? or COPE? or Both?
◉ How to provision corporate data and resources
securely?
◉ What device plaNorm(s) to be used?
◉ How extensible is the adopRng EMM infrastructure to
support new device plaNorms?
4

5. Key Challenges in EMM
◉ Not paying for buying devices, but spending that
money for managing the devices?
◉ How to make enterprise and public applicaRons
readily visible within the enterprise with proper
control?
◉ How to enforce monitoring and governance?
5

6. WSO2 Enterprise Mobility Manager
Enterprise Mobility Management soluRon with a
Mobile App-Store geared with
Enterprise-wide App Security,
comprehensive Monitoring capabiliRes, supporRng the
complete life cycle of device and applicaRon
management.
6

7. Key Benefits - OperaDonal
◉ Compose, enforce and manage granular level security
policies for individuals, groups and devices based on
role or work style.
◉ Ability to make strategic decisions with data gathered
through all acRviRes over a simple, clean interface and
powerful dashboards with analyRcs and reporRng.
◉ Strengthen businesses through secure access to
informaRon via data encrypRon, passcode
enforcement, etc.
7

8. Key Benefits - OperaDonal
◉ Users can select the devices that best meet their
individual needs, including personally-owned devices
while they sRll being managed over a centralized
enRty.
◉ Enable employees to be able to be more efficient and
for faster decision making via embracing concepts such
as BYOD.
8

9. Key Benefits - Financial
◉ Get rid of unappealing “pay-per-device” pricing
models.
◉ If you’ve got in-house experRse, Download-Deploy-
Run the servers at absolutely no cost.
◉ Embrace Bring Your Own Device (BYOD) and save the
enterprise device procurement and data plan costs
associated with each user.
9

10. WSO2 EMM 2.0.0
What’s NEW?
10

11. Revamped Architecture
◉ Built upon “WSO2 Connected Device Management
Framework”
o An extensible plaNorm to plug in any plaNorm
that needs to be managed
◉ MulRple recommended deployment paerns that fit
into your deployment
◉ Rich scalability
o Horizontal and verRcal scalability
11

12. Revamped Architecture contd..
◉ Improved “separaRon of concerns”
o Separate deployment profiles to run EMM
workers, EMM manager, Key Managers and
EMM Gateways
12

13. Revamped Architecture contd..
13

14. Revamped Architecture contd..
14

15. Backed by variety of RDBMSs
◉ All funcRonaliRes are backed by enterprise grade
RDBMSs,
o Oracle
o MySQL
o PostgreSQL, etc
15

16. Responsive User Interface
◉ User interface is designed to detect user’s screen size
and orientaRon
◉ Layouts are changed accordingly to fit the devices
16

17. Responsive User Interface
17

18. Support For Windows Devices
◉ Supports “Windows Phone 8.0 & 8.1”
◉ On-premise and federated device enrolment
◉ Supported operaRons:
o Device Lock
o Enterprise Wipe
o Lock Reset
o Ring
◉ Supported Policies:
Passcode policy, RestricRons on camera,
EncrypRon secngs.
18

19. Support For Windows Devices
◉ Windows Device Enrollment Flow
19

20. Support For Windows Devices contd..
20
1
2
3
4
5
6

21. Enhanced support for Android
◉ Supports Android 4.1.x - 6.0 (Jelly Bean -
Marshmallow)
◉ Supports the complete stack of operaRons,
commonly used configuraRon enforcements
o Wifi configuraRons
o Enterprise Wipe
o Device Lock
o Device EncrypRon and much more..
21

22. Enhanced support for iOS
◉ Support for iOS-7, iOS-8 and iOS-9
◉ Newly supported operaRons
o Add cellular operaRons
o Add restricRons (70 different operaRons)
o Trigger alarm
o Enhanced wifi configuraRons
o Add Airplay operaRons
o CalDev subscripRons
o Enhanced LDAP configuraRons
o Enhanced e-mail configuraRons
22

23. Enhanced support for iOS contd..
◉ Other new features
o Retrieve installed applicaRons
o Retrieve installed profiles
o Retrieve restricRons
o Install app-lock payloads
23

24. OperaDons Vs Policies
◉ Clear demarcaRons between device management
operaRons and configuraRons
o OperaRons i.e Device lock/Camera disable
o ConfiguraRons i.e. Wifi/PassCode
◉ ConfiguraRons are pushed to devices via policies
◉ OperaRons are pushed to devices manual selecRon
◉ Policy enforcement based on user-role, device-
ownership, device plaNorm, etc
24

25. OperaDons Vs Policies contd..
25

26. New Policy Management Framework
◉ Easy to use policy composiRon and enforcement
wizard
◉ Priority based policy enforcement
◉ Policy enforcement over,
o User role
o Device ownership
o Device plaNorm
26

27. New Policy Management Framework
27

28. New Policy Management Framework
28

29. REST API support
◉ Well designed and composed REST APIs upon all key
device management funcRonaliRes
◉ All APIs are published as “managed APIs” uRlizing the
same plaNorm components used in “WSO2 API
Manager”
◉ All device management REST APIs are OAuth
protected
29

30. Role Based Access Control
◉ IdenRfy different groups in the organizaRon
o i.e. IT Operator, Server Administrator, Manager,
etc
◉ Separate permied funcRonaliRes upon their
respecRve business role within the organizaRon
◉ Fine-grained permission model for those who wish to
adopt schems such as “POLP”
30

31. UI White-labeling
◉ Aimed at audiences who wish to customize the look
and feel of the EMM end-user app
◉ Well designed place-holders for most customizable
elements. i.e. logo, etc.
31

32. App Management Improvements
◉ Unified app management - Supports web apps and
mobile apps (iOS, Android, Windows)
◉ Security Management
o Single-Sign-On (SSO)
o Role-based User AuthorizaRon – Public/Limited
o Ability plug any user repository (MS AcRve Directory,
LDAP, Database, etc)
3

33. App Management Improvements
◉ Policy-driven Access Control
o Manage anonymous access
o Throling
o Manage fine-grain authorizaRon (via XACML-based
policies)
◉ Capable of acRng as a central OAuth Server for all APIs
o Manage OAuth Keys on behalf of apps of various
providers
o Manage Token (validaRon/expiraRon) on behalf of apps
o App will only see a single OAuth provider
3

34. App Management Improvements
◉ StaRsRcs
o Various stats (e.g. Overall SubscripRons, Usage by
Page/User, Response Time)
o Leverages on WSO2 Business AnalyRcs Monitor (BAM)
which supports batch and real-Rme data processing
o Capable of extending to third-party analyRcs engines
(e.g. Google AnalyRcs)
3

35. What’s in the plate for Q1 to Q3?
◉ EMM 2.0.1
o Bug fix release followed by EMM 2.0.0
o Carries many fixes related to user-experience,
device & applicaRon management
o Will be released in 2016 - Q1
◉ EMM 2.1.0
o Aimed at properly implemenRng BYOD - COPE
separaRon upon Android, iOS and Windows
o Will be released in 2016 - Q3
35

36. Contact us !

37. Q & A
37