Abstract: Techniques to provide secure access to a service via an unmanaged device are disclosed. In various embodiments, a request from an unmanaged device to access a service is received via a communication interface. A user associated with the request is authenticated at least in part by prompting the user to use a managed device associated with the user to interact with data displayed at the unmanaged device. Access to the service is provided via the unmanaged device at least in part via a virtual browser instance running on a secure node and configured to access the service on behalf of the user and stream data associated with the service to the unmanaged device.

Abstract: Techniques are disclosed to obtain device posture of a third party managed device. In various embodiments, a unique identifier of the third party managed device is embedded in a registration communication sent from a third party managed device to an access node associated with a first party management entity. The registration communication is sent from the third party managed device to the access node. The access node is configured to store data associating the unique identifier with the third party managed device, and to use the unique identifier to obtain from the third party management entity device posture information for the third party managed device.

Abstract: Content delivery optimization and recommendation is disclosed. A manner of delivering a content object to a mobile device may be determined at least in part by applying a behavior model associated with a user of the mobile device to attributes associated with the content object. The behavior model may be generated based at least in part on observed activities of the user. The content object is provided to the mobile device in the determined manner.

Abstract: Techniques are disclosed to provide application extension-based authentication on a device under third party management. In various embodiments, a unique identifier associated with an authentication app is stored on the device. An app extension framework that enables a native app to request, via an app extension associated with the authentication app, access to a service with which the native app is associated is provided. The authentication app is configured to use the unique identifier to determine a security posture of the device and to grant or deny access to the service based at least in part on the security posture of the device.

Abstract: Techniques are disclosed to obtain device posture of a third party managed device. In various embodiments, a unique identifier of the third party managed device is embedded in a registration communication sent from a third party managed device to an access node associated with a first party management entity. The registration communication is sent from the third party managed device to the access node. The access node is configured to store data associating the unique identifier with the third party managed device, and to use the unique identifier to obtain from the third party management entity device posture information for the third party managed device.

Abstract: Techniques to provide secure access to a service via an unmanaged device are disclosed. In various embodiments, a request from an unmanaged device to access a service is received via a communication interface. A user associated with the request is authenticated at least in part by prompting the user to use a managed device associated with the user to interact with data displayed at the unmanaged device. Access to the service is provided via the unmanaged device at least in part via a virtual browser instance running on a secure node and configured to access the service on behalf of the user and stream data associated with the service to the unmanaged device.

Abstract: In an embodiment, a process for data enrichment and matching includes obtaining a first dataset associated with a first user from a first data source, where the first dataset includes records from a structured data source, and obtaining a corresponding second dataset associated with a second user. The process includes enriching at least one of the first dataset and the second dataset. The process includes merging the first dataset and the second dataset including by matching a set of attributes based at least in part on matching corresponding attributes, wherein at least one of the first dataset and the second dataset has been enriched. The process includes outputting the merged data.

Abstract: Content delivery optimization and recommendation is disclosed. A manner of delivering a content object to a mobile device may be determined at least in part by applying a behavior model associated with a user of the mobile device to attributes associated with the content object. The behavior model may be generated based at least in part on observed activities of the user. The content object is provided to the mobile device in the determined manner.

Abstract: Techniques to provide secure access to a service via an unmanaged device are disclosed. In various embodiments, a request from an unmanaged device to access a service is received via a communication interface. A user associated with the request is authenticated at least in part by prompting the user to use a managed device associated with the user to interact with data displayed at the unmanaged device. Access to the service is provided via the unmanaged device at least in part via a virtual browser instance running on a secure node and configured to access the service on behalf of the user and stream data associated with the service to the unmanaged device.

Abstract: In an embodiment, a process for data enrichment and matching includes obtaining a first dataset associated with a first user from a first data source, where the first dataset includes records from a structured data source, and obtaining a corresponding second dataset associated with a second user. The process includes enriching at least one of the first dataset and the second dataset. The process includes merging the first dataset and the second dataset including by matching a set of attributes based at least in part on matching corresponding attributes, wherein at least one of the first dataset and the second dataset has been enriched. The process includes outputting the merged data.

Abstract: Techniques to manage mobile devices are disclosed. In various embodiments, a request to perform a management action with respect to a mobile device is received from a mobile device management (MDM) authority. A scope of authority of the MDM authority with respect to the mobile device is determined. The management action is caused to be performed with respect to the mobile device based at least in part on the determined scope of authority of the MDM authority with respect to the mobile device.

Abstract: Techniques are disclosed to obtain device posture of a third party managed device. In various embodiments, a unique identifier of the third party managed device is embedded in a registration communication sent from a third party managed device to an access node associated with a first party management entity. The registration communication is sent from the third party managed device to the access node. The access node is configured to store data associating the unique identifier with the third party managed device, and to use the unique identifier to obtain from the third party management entity device posture information for the third party managed device.

Abstract: Techniques are disclosed to provide application extension-based authentication on a device under third party management. In various embodiments, a unique identifier associated with an authentication app is stored on the device. An app extension framework that enables a native app to request, via an app extension associated with the authentication app, access to a service with which the native app is associated is provided. The authentication app is configured to use the unique identifier to determine a security posture of the device and to grant or deny access to the service based at least in part on the security posture of the device.

Abstract: Techniques to provide secure access to a service via an unmanaged device are disclosed. In various embodiments, a request from an unmanaged device to access a service is received via a communication interface. A user associated with the request is authenticated at least in part by prompting the user to use a managed device associated with the user to interact with data displayed at the unmanaged device. Access to the service is provided via the unmanaged device at least in part via a virtual browser instance running on a secure node and configured to access the service on behalf of the user and stream data associated with the service to the unmanaged device.

Abstract: In an embodiment, a process for data enrichment and matching includes obtaining a first dataset associated with a first user from a first data source, where the first dataset includes records from a structured data source, and obtaining a corresponding second dataset associated with a second user. The process includes enriching at least one of the first dataset and the second dataset. The process includes merging the first dataset and the second dataset including by matching a set of attributes based at least in part on matching corresponding attributes, wherein at least one of the first dataset and the second dataset has been enriched. The process includes outputting the merged data.

Abstract: Techniques are disclosed to obtain device posture of a third party managed device. In various embodiments, a unique identifier of the third party managed device is embedded in a registration communication sent from a third party managed device to an access node associated with a first party management entity. The registration communication is sent from the third party managed device to the access node. The access node is configured to store data associating the unique identifier with the third party managed device, and to use the unique identifier to obtain from the third party management entity device posture information for the third party managed device.

Abstract: Techniques to manage applications, such as mobile apps, across multiple management domains are disclosed. In various embodiments, a set of one or more application management policies to be enforced with respect to a mobile device is received from a management entity to which a scope of authority to manage applications with respect to the mobile device has been delegated. A management agent on the mobile device is used to enforce the one or more application management policies with respect to applications and application data that are within the scope of authority delegated to the management entity.

Abstract: Techniques to establish a communication system between an administrative node, such as a remote help desk, and an instance of a managed mobile app running on a mobile device are disclosed. In various embodiments, an indication is received to establish a help desk session associated with a mobile device. A help desk library embedded in mobile app code comprising a managed mobile app installed on the mobile device is used to provide the help desk session. The help desk library is configured to provide in real time to a help desk system external to the mobile device mobile app data associated with the managed mobile app while the managed mobile app is running on the mobile device.

Abstract: A mobile device traffic splicer is disclosed. In various embodiments, a network communication associated with a destination is received from a mobile device. A stored routing data associated with the mobile device is used to determine, based at least in part on the destination, to redirect the network communication to a proxy associated with the destination. The network communication is sent to the proxy associated with the destination. In various embodiments, one or both of metering network traffic by destination and/or domain and filtering network communications and/or portions thereof based on the destination and/or domain may be performed.

Abstract: Techniques to manage mobile devices are disclosed. In various embodiments, a request to perform a management action with respect to a mobile device is received from a mobile device management (MDM) authority. A scope of authority of the MDM authority with respect to the mobile device is determined. The management action is caused to be performed with respect to the mobile device based at least in part on the determined scope of authority of the MDM authority with respect to the mobile device.