Abstract: Systems, methods, and software can be used to handle security events of a device based on remediation actions and recovery actions. In some aspects, a method comprises: receiving, by a security gateway, a security event notification associated with a device; determining, by the security gateway and based on the security event notification, a risk level of the device; determining, by the security gateway and based on the risk level, a set of remediation actions and recovery actions; and sending, by the security gateway, an action plan indicating the set of remediation actions and recovery actions.

Abstract: Systems, methods, and software can be used to handle security events of a device based on remediation actions and recovery actions. In some aspects, a method comprises: receiving, by a security gateway, a security event notification associated with a device; determining, by the security gateway and based on the security event notification, a risk level of the device; determining, by the security gateway and based on the risk level, a set of remediation actions and recovery actions; and sending, by the security gateway, an action plan indicating the set of remediation actions and recovery actions.

Abstract: Systems, methods, and software can be used to establish collaborative communications. In some aspects, a server receives a contact search request from an application of a first organization, the contact search request including contact information. The server determines a second organization, wherein the second organization is connected to the first organization to enable a user of the first organization to search a user directory of the second organization. The server determines a subset of the user directory of the second organization that can be searched by the user of the first organization. The server transmits, to the application of the second organization, the contact information and information of the determined subset of the user directory of the second organization. The server receives a contact search result from the application of the second organization. The serer transmits the received contact search result to the application of the first organization.

Abstract: A method for managing enrollments of an IoT device is disclosed. The method includes: transmitting a request to enroll the device with a first device management service; receiving, from a server associated with the first device management service, a first policy profile including one or more first device management policies, the first policy profile defining at least one restriction on management of the device by other device management services with which the device enrolls; transmitting a request to enroll the device with a second device management service; receiving, from a server associated with the second device management service, a second policy profile including one or more second device management policies; identifying a subset of the one or more second device management policies which comply with the at least one restriction; and applying the identified subset of the one or more second device management policies on the device.

Abstract: A method for managing enrollments of an IoT device is disclosed. The method includes: transmitting a request to enroll the device with a first device management service; receiving, from a server associated with the first device management service, a first policy profile including one or more first device management policies, the first policy profile defining at least one restriction on management of the device by other device management services with which the device enrolls; transmitting a request to enroll the device with a second device management service; receiving, from a server associated with the second device management service, a second policy profile including one or more second device management policies; identifying a subset of the one or more second device management policies which comply with the at least one restriction; and applying the identified subset of the one or more second device management policies on the device.

Abstract: A method for controlling access to a vehicle is disclosed. The method includes: receiving, from a communication subsystem of the vehicle, a first request to authenticate a user requesting access to the vehicle; sending, to an electronic device associated with the vehicle, an instruction to perform a multiple-factor authentication of a first user of the electronic device; receiving, from the electronic device, a first message indicating that an identity of the first user of the electronic device has been verified based on at least the multiple-factor authentication; and in response to receiving the first message, sending, to the communication subsystem of the vehicle, a second message indicating successful authentication of the first user.

Abstract: A method for controlling access to a vehicle is disclosed. The method includes: receiving, from a communication subsystem of the vehicle, a first request to authenticate a user requesting access to the vehicle; sending, to an electronic device associated with the vehicle, an instruction to perform a multiple-factor authentication of a first user of the electronic device; receiving, from the electronic device, a first message indicating that an identity of the first user of the electronic device has been verified based on at least the multiple-factor authentication; and in response to receiving the first message, sending, to the communication subsystem of the vehicle, a second message indicating successful authentication of the first user.

Abstract: Systems, methods, and software can be used to establish collaborative communications. In some aspects, a server receives a contact search request from an application of a first organization, the contact search request including contact information. The server determines a second organization, wherein the second organization is connected to the first organization to enable a user of the first organization to search a user directory of the second organization. The server determines a subset of the user directory of the second organization that can be searched by the user of the first organization. The server transmits, to the application of the second organization, the contact information and information of the determined subset of the user directory of the second organization. The server receives a contact search result from the application of the second organization. The serer transmits the received contact search result to the application of the first organization.

Abstract: Systems, methods, and software can be used to provide authentication for an enterprise service. In some aspects, an identity server receives an authentication request. An on-premises verification command is transmitted. The on-premises verification command indicates an on-premises agent that verifies on-premises network connectivity. In response to the on-premises verification command, an on-premises verification response message is received. An authentication response is transmitted based on the received on-premises verification response message.

Abstract: Systems, methods, and software can be used to access an enterprise resource. In some aspects, configuration information for an enterprise application is received at an enterprise mobility management (EMM) client on a mobile device. A certificate that includes at least a portion of the configuration information is generated. The certificate is installed in an enterprise workspace on the mobile device. A configuration application is executed in the enterprise workspace on the mobile device to configure the enterprise application.

Abstract: Systems, methods, and software can be used to access an enterprise resource. In some aspects, a certificate for accessing enterprise resources at one or more service providers (SP) is received at an enterprise mobility management (EMM) client on a mobile device from an EMM server. An authentication request is sent to an identity provider from an application on a mobile device. In response to the authentication request, an authentication challenge is received from the identity provider. The authentication challenge includes a certificate request. In response to the authentication challenge, an authentication response is sent from the application. The authentication response includes the certificate. An authorization token is received from the identity provider. The authorization token indicates whether the identity provider validates the certificate and the mobile device.

Abstract: An apparatus and method for providing metadata with network traffic are provided. The method includes generating, at an electronic device, a network tunnel between an electronic device and at least one external electronic device that communicates with the electronic device via a communication network, and receiving data, including metadata of applications generating the received data, associated with one or more applications from the external electronic device via the network tunnel.

Abstract: An apparatus and method for providing a Mobile Device Management (MDM) service are provided. The method includes transmitting a request for an MDM server to a gateway server, the request including identification information, receiving, in response to the request, information relating to an MDM server corresponding to the identification information, and enrolling a device with the MDM server.

Abstract: Systems, methods, and software can be used to provide authentication for an enterprise service. In some aspects, an identity server receives an authentication request. An on-premises verification command is transmitted. The on-premises verification command indicates an on-premises agent that verifies on-premises network connectivity. In response to the on-premises verification command, an on-premises verification response message is received. An authentication response is transmitted based on the received on-premises verification response message.

Abstract: An enterprise server selectively controls the ability of enterprise devices to install firmware updates. In some examples, the enterprise server identifies a subset of enterprise devices designated as alpha devices for testing functionality of newly installed firmware updates prior to installation at the remaining non-alpha devices, the alpha devices being configured to apply a first firmware update policy that enables installation of firmware updates. The enterprise server transmits a first command to the non-alpha devices to apply a second firmware update policy that disables or postpones installation of firmware updates. Once a new firmware version is determined to be installed at a number of alpha devices of a particular type for a period time, without problems, the enterprise server transmits a second command to the non-alpha devices of the particular type to temporarily apply the first firmware update policy, thereby enabling installation of the new firmware version.

Abstract: Systems, methods, and software can be used to access an enterprise resource. In some aspects, configuration information for an enterprise application is received at an enterprise mobility management (EMM) client on a mobile device. A certificate that includes at least a portion of the configuration information is generated. The certificate is installed in an enterprise workspace on the mobile device. A configuration application is executed in the enterprise workspace on the mobile device to configure the enterprise application.

Abstract: Systems, methods, and software can be used to access an enterprise resource. In some aspects, a certificate for accessing enterprise resources at one or more service providers (SP) is received at an enterprise mobility management (EMM) client on a mobile device from an EMM server. An authentication request is sent to an identity provider from an application on a mobile device. In response to the authentication request, an authentication challenge is received from the identity provider. The authentication challenge includes a certificate request. In response to the authentication challenge, an authentication response is sent from the application. The authentication response includes the certificate. An authorization token is received from the identity provider. The authorization token indicates whether the identity provider validates the certificate and the mobile device.

Abstract: A method for receiving a policy is provided. The method includes receiving a policy, determining a context based on the received policy, and applying the policy, based at least in part on the determined context, to a user space of an electronic device.

Abstract: A method for receiving a policy is provided. The method includes receiving a policy, determining a context based on the received policy, and applying the policy, based at least in part on the determined context, to a user space of an electronic device.

Abstract: An apparatus and method for providing metadata with network traffic are provided. The method includes generating, at an electronic device, a network tunnel between an electronic device and at least one external electronic device that communicates with the electronic device via a communication network, and receiving data, including metadata of applications generating the received data, associated with one or more applications from the external electronic device via the network tunnel.