Abstract: Trigger based analytics database synchronization is described. In one example case, a trigger is invoked based on an operation issued for a record in a transactional database. According to the trigger, one or more data values for synchronization from the transactional database to an analytics database are determined. A message including the data values is formed and added to a message queue through a message infrastructure service including a message broker. In turn, the values from the message are stored in a suitable memory space, such as a staging table, for forwarding to an analytics computing system. Using the trigger and the message infrastructure service, execution of the transactional database operation can be detached in execution from the addition of the value to the staging table and synchronization with the analytics computing system.

Abstract: A platform for storing and reporting of data records associated with management of a population of managed devices is disclosed. Data records are injected into a hosted computing environment in which data processing services are arranged to store and generate analytics associated with a mobile device management (MDM) platform.

Abstract: Various examples for performing rule processing for device management data evaluation are described. According to some examples, one or more computing devices can receive new device data from a client device indicative of a current configuration of the client device and identify a change of a device configuration value from a past device configuration value by comparing the new device data to historic device data. The computing devices can send the new device data to a rule evaluation service to identify one or more rules associated with the device configuration value a rule action service to perform an action specified in the rules. The rule action service can determine the action to perform based on the device configuration value.

Abstract: Event based analytics database synchronization is described. In one example, an event tracking engine can sequence through batches of records in a transactional database that is being synchronized to an analytics database. The event tracking engine can determine a last version attribute associated with the batch, and query the transactional database to identify any records for the batch having a more recent version attribute than the last version attribute. When any records in the transactional database having a more recent version attribute are identified, the event tracking engine finds the data values in the record are different than those in the analytics database. The data values can be normalized, for example, before being forwarded to an analytics system for incorporation into the a analytics database. Over time, changes in the transactional database are identified and populated or mirrored in the analytics database.

Abstract: Various examples for performing rule processing for device management data evaluation are described. According to some examples, one or more computing devices can receive new device data from a client device indicative of a current configuration of the client device and identify a change of a device configuration value from a past device configuration value by comparing the new device data to historic device data. The computing devices can send the new device data to a rule evaluation service to identify one or more rules associated with the device configuration value a rule action service to perform an action specified in the rules. The rule action service can determine the action to perform based on the device configuration value.

Abstract: A platform for storing and reporting of data records associated with management of a population of managed devices is disclosed. Data records are injected into a hosted computing environment in which data processing services are arranged to store and generate analytics associated with a mobile device management (MDM) platform.

Abstract: A platform for storing and reporting of data records associated with management of a population of managed devices is disclosed. Data records are injected into a hosted computing environment in which data processing services are arranged to store and generate analytics associated with a mobile device management (MDM) platform.

Abstract: Techniques to authorize access to a service are disclosed. In various embodiments, a token that includes data comprising or otherwise associated with a device identifier of a device on which an application configured to access a service is installed is provided to the application. A service access authorization request that includes the token is received. The token is used to determine device information associated with the service access authorization request.

Abstract: Trigger based analytics database synchronization is described. In one example case, a trigger is invoked based on an operation issued for a record in a transactional database. According to the trigger, one or more data values for synchronization from the transactional database to an analytics database are determined. A message including the data values is formed and added to a message queue through a message infrastructure service including a message broker. In turn, the values from the message are stored in a suitable memory space, such as a staging table, for forwarding to an analytics computing system. Using the trigger and the message infrastructure service, execution of the transactional database operation can be detached in execution from the addition of the value to the staging table and synchronization with the analytics computing system.

Abstract: Event based analytics database synchronization is described. In one example, an event tracking engine can sequence through batches of records in a transactional database that is being synchronized to an analytics database. The event tracking engine can determine a last version attribute associated with the batch, and query the transactional database to identift any records for the batch having a more recent version attribute than the last version attribute. When any records in the transactional database having a more recent version attribute are identified, the event tracking engine finds the data values in the record are different than those in the analytics database. The data values can be normalized, for example, before being forwarded to an analytics system for incorporation into the a analytics database. Over time, changes in the transactional database are identified and populated or mirrored in the analytics database.

Abstract: A platform for storing and reporting of data records associated with management of a population of managed devices is disclosed. Data records are injected into a hosted computing environment in which data processing services are arranged to store and generate analytics associated with a mobile device management (MDM) platform.

Abstract: A mobile device management system that monitors the security state of one or more mobile devices and sets indicators related to such security state. Enterprise network applications, such as an email application, can access the security state information when making access control decisions with respect to a given mobile device.

Abstract: Rule-based mobile device management delegation is disclosed. A set of rules are applied to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions. The mobile device is managed according to a policy associated with the assigned management partition.

Abstract: One embodiment of the present disclosure provides a method that includes accessing, by a mobile device management system, a profile for a mobile device. The method also includes negotiating, by the mobile device management system, with a certificate authority to obtain a certificate for the mobile device. The negotiating with the certificate authority includes imitating the mobile device based on the profile. The negotiating with the certificate authority also includes, based at least on the imitation, transmitting one or more certificate enrollment messages to the certificate authority. The negotiating with the certificate authority further includes, based on the one or more messages, receiving, at the mobile device management system, the certificate for the mobile device. The method further includes transmitting the certificate to a control agent hosted on the mobile device for installation.

Abstract: Rule-based mobile device management delegation is disclosed. A set of rules are applied to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions. The mobile device is managed according to a policy associated with the assigned management partition.

Abstract: Rule-based mobile device management delegation is disclosed. A set of rules are applied to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions. The mobile device is managed according to a policy associated with the assigned management partition.

Abstract: One embodiment of the present disclosure provides a method that includes accessing, by a mobile device management system, a profile for a mobile device. The method also includes negotiating, by the mobile device management system, with a certificate authority to obtain a certificate for the mobile device. The negotiating with the certificate authority includes imitating the mobile device based on the profile. The negotiating with the certificate authority also includes, based at least on the imitation, transmitting one or more certificate enrollment messages to the certificate authority. The negotiating with the certificate authority further includes, based on the one or more messages, receiving, at the mobile device management system, the certificate for the mobile device. The method further includes transmitting the certificate to a control agent hosted on the mobile device for installation.

Abstract: Rule-based mobile device management delegation is disclosed. A set of rules are applied to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions. The mobile device is managed according to a policy associated with the assigned management partition.

Abstract: Rule-based mobile device management delegation is disclosed. A set of rules are applied to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions. The mobile device is managed according to a policy associated with the assigned management partition.

Abstract: Techniques to authorize access to a service are disclosed. In various embodiments, a token that includes data comprising or otherwise associated with a device identifier of a device on which an application configured to access a service is installed is provided to the application. A service access authorization request that includes the token is received. The token is used to determine device information associated with the service access authorization request.