Overview
Workplace's iOS and Android applications include security capabilities that give your organisation the option apply additional security checks as well as placing limits on copying or removing information from the apps. These restrictions can provide additonal guardrails that help keep sensitive company content isolated, especially when Workplace is accessed from a personal rather than a corporate device.
You can read more about Workplace's Mobile Security capabilties in general and the different modes of deployment in the Mobile Security deployment approaches.
Workplace MAM
This section discusses the activation of Workplace Mobile Security restrictions using the native Mobile Application Management (MAM) layer.
The mobile security configuration applicable to the Workplace apps can be set from the Mobile Security section of the Workplace Admin Panel. The configuration that you set will be sent to the Workplace apps and will only apply to them.
The feature also allows you to configure the audience for which you want to apply the configuration, that can be set to everyone in the instance or to one or more People Sets.
Configure a mobile security policy on Workplace
These are the steps to configure a mobile security policy on the Workplace MAM solution:
Go to the Mobile Security section of the Admin panel. If you cannot see this page, go to the Workplace Admin Panel and open the Security page. Click the Settings button in the top right and then enable the toggle for Mobile Security.
In the audience option, select Everyone or People sets. If you select People Sets, pick the People Sets for which the rules should apply.
In the rules options, enable or disable the following rules: Require reauthentication, Turn off copy/paste, Turn off downloads, Turn off screenshots and screen recordings. If the restriction Require authentication is enabled, you will have to select when the reauthentication will be required.
More details in the MAM Restrictions section.
Workplace Mobile Security features are currently supported for Workplace apps which were released after June 2021 (minimum v324). In the Mobile app version requirements section you can determine the behaviour for staff with older unsupported apps including the option to notify them to upgrade and restrict regular app usage after a grace period.
MAM Restrictions
These are the restrictions available in the Mobile Security options of Workplace:
Restriction Name | Values | Platform | Description |
|---|---|---|---|
Require reauthentication | Enabled/Disabled and Time in minutes | iOS, Android | Prompts people on application open (either cold start or from background) with a biometric challenge with control over the frequency. On iOS fallback to device pincode is supported. |
Turn off copy/paste | Enabled/Disabled | iOS, Android | Restricts people from directly copying and pasting text outside Workplace apps. |
Turn off downloads | Enabled/Disabled | iOS, Android | Restricts people from downloading files or images from Workplace apps to local device storage or sharing them with other apps. Files will preview within the application itself. |
Turn off screenshots and screen recordings | Enabled/Disabled | iOS (only screen recording), Android | Restricts people from taking screenshots and/or recording content in Workplace apps. |
