Transcription
Agile Enterprise Mobility WithAppdomefeaturing research from forresterBridge Your Enterprise Mobile StrategyTo Partners And Contractors
2New Forrester Research highlights the enterprise trend towardan App-Centric mobile application management (MAM) and appaugmentation strategies to get more mobile apps into the hands ofa broader and more diverse user population – faster.Getting agile with mobilityThe number of mobile apps in the modern enterprise is growing rapidly. Infrastructures, systems,vendors and standards for access, authentication, management, security and more are changingconstantly. Delivering a consistent, high quality mobile experience for all users is a challenge for anymobile app owner, Mobile IT and mobility professional.In thisdocument2 Agile EnterpriseMobility WithAppdome6 Bridge YourEnterprise MobileStrategy ToPartners AndContractors16 About AppDomeAgile Enterprise Mobility brings mobile application management (MAM) and app augmentationtechnologies together, combining them to offer organizations greater flexibility and speed in meetingmobility objectives. The goal of MAM is to allow App-Centric security and management controls,without the need for device level profiles or enrollment. The goal of app augmentation is to delivervendor choice, feature richness, and implementation control inside Android and iOS apps, regardlesswho built the app and tailor made to the way apps are built.With MAM and app augmentation combined, Agile Enterprise Mobility allows organizations todeliver any authentication, management and security implementation inside Android and iOS appswithout regard to the nature or security of the device (managed, not managed, BYOD or employerprovided). This means that organizations can create a consistent mobile app experience for allusers, implementing the security, authentication and management features needed most by eachorganization.In the report, “Bridge Your Enterprise Mobile Strategy To Partners And Contractors: GrantBroader Access To Applications Without Mobile Device Management,” Forrester states in its researchthat App Augmentation is a critical factor to achieving agile enterprise mobility.App augmentation technology operates in tandem with containerization and standalone MAMproducts but offer additional integration and security functionality. “For example, Appdome fusesapplications with additional security policies, such as anti-tampering and code obfuscation. I&O proscan also quickly add one or multiple EMM-specific SDKs to mobile apps, which speeds delivery anddrives down costs,” Forrester stated in the report.
3Spotlight: app security specialistsWhat it offers:Third-party SDK and app wrappingaugmentationMobile app fusion without changing thesource codeBridge the gap between EMM services andapps (for example, VOIP might not workthrough EMM)Use for:Layering additional security capabilities to anEMM or MAM suiteReducing burden on SDK testing andconfiguration, both short- and long-termIdentifying and remediating attacks inreal time, DLPEnsuring parity of application securityfunctionality across operating systemsSample vendors:Don’t use for:Providing a mobile application catalogAppdomeApplication management capabilities, such asapp distribution, app updates, and licenserevocationBetter MobileBlue Cedar NetworksDevice-specific capabilities, such asgeofencingNo code App AugmentATION by APPDOMEAppdome puts mobile app owners, Mobile IT and Mobility professionals in control of their mobility strategies.Using Appdome, organizations control implementation, choose vendors, and select features and services asneeded to support use cases and deliver the best mobile experience to users. No code or coding required.Appdome provides a multi-service, multi-vendor, patented technology that has several advantages over outdatedwrapping technologies. Appdome does not utilize swizzling or private APIs or any methods that prohibit apps frombeing submitted to public App Stores. A Fused Appdome app is an app, and features implemented via Appdomeare added as if a developer natively coded the features to the app. Appdome Fused Apps can be submitted to allPublic App Stores.
4KEY BENEFITS - APPDOME FOR ENTERPRISE MOBILITYVendor ChoiceControlGuaranteedOutcomesAppdome Mobility Suite is a proprietary service that guarantees that every Android and iOS app will work insidethe EMM or MAM system of choice. Appdome extends EMM vendor support to all mobile apps created in anydevelopment environment. Appdome Mobility Suite allows latency sensitve features such as VoIP, instantthe gap between EMM services and mobile apps needed by corporate users.Ecosystemservicessharing and other EMM or MAM ecosystem services to Android and iOS apps. This is extremely powerful forservices to meet today’s mobility needsAppdome has a growing list of no-code service implementation choices for developers and mobile organizations.Management: Appdome for EMM automates the implementation of leading EMM SDKs such as BlackBerryDynamics, Microsoft Intune, IBM MaaS360, AirWatch and MobileIron into any Android and iOS mobile app.This allows internally built and 3rd party apps to be deployed and managed by EMMs in minutes. On top ofimplementing EMM SDKs, Appdome offers it’s Appdome Mobility Suite to bridge the gaps between EMMs andapps, and Boost-EMMTM to connect EMM vendor ecosystem services such as secure browser and secure emailto apps. This allows apps to function as if fully designed to support the EMM from the ground up – all withoutwriting a single line of code.Security: Appdome’s Mobile Security Suite is a comprehensive mobile security offering that delivers best practicemobile security functionality to any Android and iOS mobile app. Appdome’s Mobile Security Suite includesmultiple categories of mobile app protections including: data loss prevention, data-at-rest encryption (FIPS 140),OS integrity, secure communication (MiTM and Certificate Validation), mobile privacy (application blurring, pincode, and Touch ID). These features can be applied in an always-on or managed implementation and includedeveloper options to design in app experiences for users.Identity: Appdome’s Identity service enables customers to securely integrate mobile identity, modernauthentication, 2FA, MFA and biometrics functionality to new and existing mobile apps. A core component of thisoffering is Appdome for SSO , which includes the ability to instantly add cloud identity services (e.g., Okta orMicrosoft Azure AD) and portal-based authentication (e.g., Kerberos and KCD) to apps without code or coding.
5Threat Defense: Appdome for Mobile Threat Defense automates the process of adding anti-malware, botprotection and fraud prevention SDKs and APIs to iOS and Android apps. Enterprises and ISVs can select froma list of best-of-breed Mobile Threat Management providers like F5, Check Point and Symantec and add theirservice to any mobile app in seconds – with a single click. It gives end-users a truly native in-app protectionagainst malware that is secure by design.
6NOT LICENSED FOR DISTRIBUTIONBridge Your Enterprise Mobile Strategy ToPartners And ContractorsGrant Broader Access To Applications Without Mobile Device Managementby Andrew HewittMay 15, 2018Why Read This ReportKey TakeawaysEmployees aren’t the only group that needsenterprise mobile support. Your business’growth depends on constituencies outside yourworkforce, such as contractors and other B2Bpartners — and you need a way to safely expandthe scope of your enterprise mobile efforts toreach them. Traditional tools that infrastructure andoperations (I&O) uses to secure access to mobileapps, such as mobile device management (MDM),can’t effectively help here. This report helpsI&O leaders expand the scope of their mobiletransformation using an app-centric approach.MDM Can Take Your Mobility Strategy OnlySo FarWhile MDM is a key technology for brokeringaccess to mobile applications, there are somegroups for which MDM enrollment isn’t possibleor desirable, such as contractors and privacyminded employees.forrester.comEmploy An App-Centric Strategy To Open UpMobile AccessContainerization, standalone mobile applicationmanagement (MAM), and app augmentationtechnologies help I&O pros enable workers withaccess to mobile apps without MDM enrollment.
7For Infrastructure & Operations ProfessionalsBridge Your Enterprise Mobile Strategy To Partners AndContractorsGrant Broader Access To Applications Without Mobile Device Managementby Andrew Hewittwith Christopher Voce, Clare Garberg, and Diane LynchMay 15, 2018Table Of ContentsRelated Research DocumentsDevice-Centric Mobility Strategies Limit MobileTransformationThe Forrester Wave : Enterprise MobilityManagement, Q4 2017App-Centric Solutions Bring Mobile ToUnderserved GroupsOrganize For Mobile Development SuccessThe State Of Enterprise Worker Mobility, 2017Use App-Centric Solutions To Increase YourEnterprise Mobile ReachRecommendationsNext Steps: Build A Plan To Drive Mobile AppAdoptionShare reports with colleagues.Enhance your membership withResearch Share.Forrester Research, Inc., 60 Acorn Park Drive, Cambridge, MA 02140 USA 1 617-613-6000 Fax: 1 617-613-5000 forrester.com 2018 Forrester Research, Inc. Opinions reflect judgment at the time and are subject to change. Forrester ,Technographics , Forrester Wave, TechRadar, and Total Economic Impact are trademarks of Forrester Research, 2018ForresterResearch,Inc.Unauthorizedcopying ordistributingis a violationof copyrightlaw.Inc.All othertrademarksare thepropertyof their respectivecompanies.Unauthorizedcopyingor [email protected] 1 [email protected] violation of copyrightorlaw.or 1 866-367-7378
8Device-Centric Mobility Strategies Limit Mobile TransformationCustomer-obsessed I&O teams know that providing employees with access to mobile applications isgood for business, but they’re missing a greater opportunity.1 Today’s mobility managers rely heavily ondevice-centric technologies such as mobile device management — but MDM can’t help when devicemanagement is neither feasible nor desirable for groups such as:›› Contractors and B2B partners to which you want to extend mobile services. Unlike typical fulltime employees, these groups might work for multiple companies simultaneously or may have tofollow their own companies’ mobile policies. Because a mobile operating system can accept onlyone MDM profile at a time, it’s difficult to enroll these workers and give them access to the appsthey need. This was the case for one large energy company that developed 30-plus mobile appsfor its global population of contractors, only to find that the workers couldn’t access the apps in asecure way.›› Privacy-minded employees who use personal devices for work. Forrester’s clients routinelyreport that their employees worry about the company’s ability to view and remotely wipe personaldata from their devices. One large manufacturing company found that only 60% of employeeswould accept MDM enrollment on a personal device, which left them unable to access thecompany’s nearly 100 mobile apps. While employees’ concerns might be more emotional thanpractical, organizations need to explore alternative options for privacy-minded employees who willnever accept MDM enrollment.2App-Centric Solutions Bring Mobile To Underserved GroupsHow can I&O teams give application access to employees who can’t or won’t enroll? The easiestanswer: Add security functionality into the apps themselves. Today, there are three ways to do this, butall of them involve using either a software development kit (SDK) or “app wrapper” to add an additionallayer of security and manageability into the application (see Figure 1, see Figure 2, and see Figure 3).When implemented, these controls help I&O professionals ensure access to mobile applications even ifa device is unmanaged. The three main approaches are:›› App containerization. Containerized solutions from traditional enterprise mobility management(EMM) vendors like BlackBerry, Citrix, and IBM are easy to recognize. Employees log into asingle encrypted portal application that grants access to many other apps.3 This partition allowsemployees to easily distinguish between work and personal apps, but constantly switchingbetween their containerized and personal apps can be disruptive. I&O teams frequently deploycontainerization when employees need access to both public and custom-built applications or ifthe apps are hosted on-premises. 2018 Forrester Research, Inc. Unauthorized copying or distributing is a violation of copyright [email protected] or 1 866-367-7378
9›› Standalone mobile application management. Vendors such as Appaloosa and Apperian use appwrapping to add additional security and management functionality on an app-by-app basis. Thesesit alongside personal apps on a worker’s device rather than in a container. Provided the app iscompatible with the wrapper, these solutions offer the most native experience for users. They’re anexcellent fit for organizations that have large estates of custom-built applications and want visibilityinto who’s downloading and using those apps. Because of the potential limitations of wrappingthird-party apps, I&O pros who oversee a large, diverse group of them must evaluate whetherstandalone MAM is a fit.4›› App augmentation. These technologies operate in tandem with containerization and standaloneMAM products but offer additional integration and security functionality. For example, Appdomefuses applications with additional security policies, such as anti-tampering and code obfuscation.I&O pros can also quickly add one or multiple EMM-specific SDKs to mobile apps, whichspeeds delivery and drives down costs. Other vendors, such as Better Mobile, offer an SDK thatintegrates with EMM solutions to provide real-time discovery and remediation of malware and othervulnerabilities within the apps.FIGURE 1 App Containerization Is Ideal For Separation Of Personal And Business AppsSpotlight: MAM from EMMWhat it offers:Use for:SDK-based monolithic containerCustom, vendor, virtualized appsSDK-based app wrapperGroups that require basic levels of securitythrough an SDKAdditional SDK framework championed byAppConfig for MDM-enrolled devicesFully brandable enterprise app store, withoption to enroll in MDM (preferred method)Don’t use for:On-premises or hybrid environmentsBetter visibility into application adoptionthrough a single management consoleSample vendors:Large mobile environments with heterogeneousoperating systemsBlackBerry (Dynamics)Citrix (MDX)High security environments without add-onsIBM (MaaS360)Organizations that can’t afford testing andconfiguration of SDK updatesMicrosoft (Intune MAM)MobileIron (Apps@Work)Sophos (MAM)VMware (WorkspaceOne) 2018 Forrester Research, Inc. Unauthorized copying or distributing is a violation of copyright [email protected] or 1 866-367-7378
10FIGURE 2 Standalone MAM Is A Good Fit For Many Custom-Built AppsSpotlight: standalone MAMWhat it offers:SDK-based app wrappingUse for:Large populations of contract workersBinary-based app wrappingPopulations who won’t enroll in MDMFully brandable enterprise app storeLayering time-specific app policies, suchas app expirationApp management capabilities such as licensemanagement, app signing, user reviews, etc.Large environments of custom-built appsSample vendors:Don’t use for:On-premises environmentsAppaloosaHigh-security scenarios where encryption ofdata at rest is necessaryPulse SecureApperian (Arxan)App ecosystems that are 100% vendor-builtFIGURE 3 App Security Specialists Add Additional Integration And Security CapabilitiesSpotlight: app security specialistsWhat it offers:Third-party SDK and app wrappingaugmentationMobile app fusion without changing thesource codeBridge the gap between EMM services andapps (for example, VOIP might not workthrough EMM)Use for:Layering additional security capabilities to anEMM or MAM suiteReducing burden on SDK testing andconfiguration, both short- and long-termIdentifying and remediating attacks inreal time, DLPEnsuring parity of application securityfunctionality across operating systemsSample vendors:Don’t use for:Providing a mobile application catalogAppdomeApplication management capabilities, such asapp distribution, app updates, and licenserevocationBetter MobileBlue Cedar NetworksDevice-specific capabilities, such asgeofencing 2018 Forrester Research, Inc. Unauthorized copying or distributing is a violation of copyright [email protected] or 1 866-367-7378
11Use App-Centric Solutions To Increase Your Enterprise Mobile ReachAs I&O teams evaluate their mobile app management needs, it’s useful to examine the businessbenefits that organizations achieve when they make app-centric mobility management part of theirstrategy. For example:›› A US-based cable company uses containerization to improve contractor productivity. A largecable company used IBM’s MaaS360 container to deploy apps to contractors installing cableservices in the field. The solution supports 14,000 personally owned tablets that contractors useto get product information, interface with customers, and order new parts. How does it work?Contractors authenticate using a URL, which then grants access to a set of custom-built apps.Because the apps are using MaaS360’s SDK, sensitive data is encrypted, and the company’smobility team has visibility into app downloads and usage.›› Leroy Merlin uses standalone MAM to improve the employee experience. Leroy Merlin is aFrench retailer that recently gave 7,000 employees access to 40-plus apps on unmanaged BYODdevices.5 The company uses Appaloosa’s enterprise app store to allow employees to downloadapps in a self-service manner. The solution helps Leroy Merlin monitor app usage and performance,and employees can submit reviews to drive continuous improvement of the applications. If anemployee leaves the company, Leroy Merlin simply revokes access through credentials or remotelywipes all corporate data within the apps.›› A financial services firm augments apps to speed delivery and increase performance. Aftermoving to BYOD, a leading financial services company opted to use app wrapping to secureapps.6 However, the process was manual, and the wrapper caused many apps to performerratically. Recognizing the need to provide a better experience, the firm now uses Appdome toquickly integrate MAM policies to its applications. The effect is twofold: I&O teams can secureand distribute new applications faster, and employees have a consistent app experience acrossoperating systems.RecommendationsNext Steps: Build A Plan To Drive Mobile App Adoption“If you build it, they will come” is a famous line from the 1989 movie Field Of Dreams.7 Sadly, it doesn’tapply here. While it might be tempting to think that we can simply build and distribute applications andthat employees will magically start using them, I&O pros know that never works. You need to developan engagement strategy that encourages adoption of mobile services throughout the organization toavoid investments in apps that nobody uses. To successfully drive mobile app adoption, try: 2018 Forrester Research, Inc. Unauthorized copying or distributing is a violation of copyright [email protected] or 1 866-367-7378
12›› Crafting a marketing campaign. How will employees know when you publish a new app to theapp store? An internally distributed electronic newsletter is useful for widely applicable apps. SavvyForrester clients have also used mobile notifications through an enterprise app store to targetspecific roles that might find an app useful. If you’re releasing many apps at once, hold a “newtechnology showcase” to demonstrate the value of new applications and allow employees to testthem. Publish a video series for remote workers or contractors working on the other side of theglobe. Think broadly here, and don’t be afraid to experiment.›› Nominating line-of-business evangelists. While marketing campaigns do help drive awareness,word of mouth is still the primary avenue through which employees hear about and test mobileapplications. If you have an employee who absolutely loves a mobile application that your mobilityteam has developed, consider formally appointing that person to evangelize the benefits of thatmobile app in their line of business to help get the word out. Because these evangelists have seenthe value in their work, they’ll internalize and communicate the benefits in a way that you can’t.›› Engaging more deeply with the science of productivity. Forrester’s employee experienceresearch shows that the No. 1 determinant of employee happiness is the ability to get workdone.8 If your apps don’t serve that purpose, employees will neglect them. We recommend thatI&O teams conduct regular sessions with employees to understand their daily journeys.9 Strive toidentify areas where employees could benefit from a mobile experience, where their apps currentlysucceed, and where they fall flat.10 2018 Forrester Research, Inc. Unauthorized copying or distributing is a violation of copyright [email protected] or 1 866-367-7378
13Engage With An AnalystGain greater confidence in your decisions by working with Forrester thought leaders to applyour research to your specific business and technology initiatives.Analyst InquiryAnalyst AdvisoryWebinarTo help you put researchinto practice, connectwith an analyst to discussyour questions in a30-minute phone session— or opt for a responsevia email.Translate research intoaction by working withan analyst on a specificengagement in the formof custom strategysessions, workshops,or speeches.Join our online sessionson the latest researchaffecting your business.Each call includes analystQ&A and slides and isavailable on-demand.Learn more.Learn more.Learn more.Forrester’s research apps for iOS and Android.Stay ahead of your competition no matter where you are.Endnotes1Forrester’s mobility research has proven that empowered mobile employees are happier and more productive andthat they serve happier customers. For example, Forrester’s Employee Mobile Mind Shift Index shows that, comparedwith the least mobile-intense users, mobile-enabled employees are 28 percentage points more likely to estimate theircompany’s year-over-year revenue growth as 10% or more. See the Forrester report “The State Of Enterprise WorkerMobility, 2017.”2Forrester often speaks with clients who have trouble enrolling users in an MDM service. Employees frequently believethat the MDM service can see more than it realistically can. Photos, contacts, and personal application data typicallydon’t fall under the purview of an MDM service. For example, an MDM tool can’t see a password for a mobile bankingapplication. Technology organizations must educate their employees and clearly delineate what the MDM can seeversus what it can’t.3Forrester published a report in 2014 that illustrates the key differences between SDKs and app wrappers. This adviceis still relevant, with the exception that mobile app augmentation platforms make SDKs much easier to implementthan they were before. See the Forrester report “In The Mobile Security Bout Of The Year, App Wrapping BeatsContainerization On Points.” 2018 Forrester Research, Inc. Unauthorized copying or distributing is a violation of copyright [email protected] or 1 866-367-7378
144Apple and Google prohibit the modification of apps. It’s illegal for an enterprise to take an application written andpublished by someone else and modify it without the developers’ express permission. Apple terms and conditionsenforce a similar concept when enterprises download mobile applications from iTunes, making it against the rules foran enterprise to modify the binary in any way.5BYOD stands for “bring your own device.”Source: “Case Study: Leroy Merlin,” Appaloosa, 2017 Use Case Leroy Merlin Final.pdf).6Source: App Dome Case Study -institution).7Source: Field of Dreams, Universal Studios, 1989.8See the Forrester report “The Employee Experience Imperative.”9For more information on the employee journey, see the Forrester report “Focus On Employees’ Daily Journeys ToImprove Employee Experience.”10Forrester has published in-depth research on how to design mobile applications according to the need of theconsumer and the employee. See the Forrester report “Mobile App: How To Make A Call.” 2018 Forrester Research, Inc. Unauthorized copying or distributing is a violation of copyright [email protected] or 1 866-367-7378
We work with business and technology leaders to developcustomer-obsessed strategies that drive growth.Products and Services››››››››››››Core research and toolsData and analyticsPeer collaborationAnalyst engagementConsultingEventsForrester’s research and insights are tailored to your role andcritical business initiatives.Roles We ServeMarketing & StrategyProfessionalsCMOB2B MarketingB2C MarketingCustomer ExperienceCustomer InsightseBusiness & ChannelStrategyTechnology ManagementProfessionalsCIOApplication Development& DeliveryEnterprise Architecture›› Infrastructure & OperationsSecurity & RiskSourcing & VendorManagementTechnology IndustryProfessionalsAnalyst RelationsClient supportFor information on hard-copy or electronic reprints, please contact Client Support at 1 866-367-7378, 1 617-613-5730, or [email protected]. We offer quantitydiscounts and special pricing for academic and nonprofit institutions.Forrester Research (Nasdaq: FORR) is one of the most influential research and advisory firms in the world. We work withbusiness and technology leaders to develop customer-obsessed strategies that drive growth. Through proprietaryresearch, data, custom consulting, exclusive executive peer groups, and events, the Forrester experience is about asingular and powerful purpose: to challenge the thinking of our clients to help them lead change in their organizations.142938For more information, visit forrester.com.
Appdome is the industry’s first no-code platform for mobile integration. Appdomeenables the rapid integration of security, mobility, authentication, threat defense,app shielding and other features to Android and iOS apps on demand. Appdomeshortens the mobile app deployment cycle and speeds app delivery for enterpriseorganizations, eliminating dependencies on compatibility, resources and standardsinside apps. Appdome provides an intuitive and easy to use mobile integrationworkflow that allows users to complete full mobile integration projects on appbinaries alone. There are no pre-requisites for any app. No source code ormobile development is required. The solution is currently used by the world’sleading financial, healthcare and e-commerce companies to support productivity,compliance, and security for consumers and employees. For more information, visitwww.appdome.com.
Broader Access To Applications Without Mobile Device Management," Forrester states in its research that App Augmentation is a critical factor to achieving agile enterprise mobility. App augmentation technology operates in tandem with containerization and standalone MAM products but offer additional integration and security functionality.
