Secure Your First BlackBerry Dynamics App

Hong Kong 2018

Hong Kong 2018 Secure Your First BlackBerry Dynamics App EK Choi, Enterprise Solutions Manager

Build Integration Dynamics runtime is for secure mobile and desktop applications Exposes capabilities via APIs packaged as an SDK which gets linked with your application code Includes resources which include a small user interface in support of APIs Application Code BlackBerry Dynamics Runtime Library and Resources BlackBerry Dynamics Application 2017 BlackBerry. All Rights Reserved. 4

Application Integration Authorization triggered by single API call Application logic must ensure that authorization has been properly completed prior to full application launch Must handle appropriate events generated by the runtime as state changes occur in the authorization life cycle BlackBerry Dynamics Application 2017 BlackBerry. All Rights Reserved. 5

Activation Mandatory for Dynamics applications Occurs on first execution Internet connection required Needs email address and access key Prompts for container password if appropriate Establishes relationship between Dynamics Runtime and your enterprise infrastructure 2017 BlackBerry. All Rights Reserved. 6

Easy Activation User selects previously activated application to be the delegate for activation of a new application Improved user experience by not requiring an access key per application User only needs to know the delegate application s password Most common case is that only one Easy Activation candidate is offered to the user at a time. 2017 BlackBerry. All Rights Reserved. 7

Authentication Occurs when launching an application following Power on Being unloaded from memory Requires the container password and/or Trust Authentication Framework (TAF) factors Runtime derives an application data encryption key from the unlock password to protect data on the device Offline applications are fully supported Default is one unlock password per application 2017 BlackBerry. All Rights Reserved. 8

Authentication Delegation Application can delegate authentication to another application Improves user experience through single password and inactivity timer Enabled via the administrator no changes are required by development Administrator sets authentication delegation via policy Typically one application is set as the authentication delegate for the device 2017 BlackBerry. All Rights Reserved. 9

Identifiers BlackBerry Dynamics Entitlement Identifier must be globally unique - aka BlackBerry Dynamics Application ID - aka GDApplicationID 1. Reverse your domain name 2. Include subdomains as needed for organization 3. Include your application name So com.good + gd.example + rssreader becomes com.good.gd.example.rssreader Dynamics Entitlement Version should only be changed when an aspect of your BlackBerry Dynamics integration changes 2017 BlackBerry. All Rights Reserved. 12

Enterprise Simulation Mode Good for early stage iterative development Enables development in parallel with infrastructure deployment Only works with the simulator and an internet connection is required Applications will access backend resources via your computers network connection New build required to change the library mode Warnings will appear in the GD Runtime resources when simulation mode is enabled 2017 BlackBerry. All Rights Reserved. 13

App Activation and Authorization RSSReader BlackBerry Dynamics Sample App 1. Install 2. Email and access keys - sent by admin or generated via UEM self-service portal 3. User enters email and access keys 4. Activation Process 5. User creates password 6. Launches the main UI 2017 BlackBerry. All Rights Reserved. 14

Happy Coding! You are now ready to complete the following section of the BlackBerry Developer Summit Workbook on the platform of your choice: Session: Secure Your First BlackBerry Dynamics App Readiness page: www.blackberrydevsummit.com Please do not hesitate to ask for help from any of the developer support staff ipad and iphone are trademarks of Apple, Inc., registered in the U.S. and other countries. Android is a trademark of Google Inc. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. BlackBerry is a trademark of Research In Motion Limited. 2017 BlackBerry. All Rights Reserved. 18