Device Security

You can combine multiple mechanisms to fully secure devices. In addition to using the built-in security features of both the device or SAP Mobile Platform, SAP recommends that you also use Afaria so you can remotely initiate security features as required.

SAP Mobile Platform security features for devices include data encryption, login screens, and data vaults for storing sensitive data.

• Limiting Application Access
  Application access to SAP Mobile Platform runtime is tightly controlled: before a user can access a mobile application, he or she must provide a passcode; before the application can access the runtime, the application must be registered and provisioned with required connections and security configurations.
• Securing Sensitive Data On-Device with DataVault
  (Not applicable to Hybrid Web Container) Developers should use a data vault with device applications to securely store “secrets” on the device. Data vaults are added using the DataVault API.
• Provisioning Security Artifacts
  Typically, you must provision SAP Mobile Platform security artifacts before applications can be used. The manner by which an artifact is provisioned depends on the artifacts themselves, the device types used, and your deployment environment.
• Establishing Encrypted Application Connections
  Synchronization and messaging connection are encrypted by default. However, for replication connections that use E2EE, the client must be configured correctly to establish connections to the correct HTTP or HTTPS port.