Samsug SDS IAM&EMM Administrator’s Guide Version 16.9 Published: October 2016 Before using this information and the product it supports, be sure to read the general information on this page. Publisher Samsung SDS Co., Ltd Address 125, 35-Gil, Olympic-Ro, Songpa-Gu, Seoul, South Korea. Phone +82 1644 0030 Email [email protected] Website www.samsungsdsbiz.com This edition applies to Samsung SDS EMM Version 16.9, and to all subsequent releases and modifications thereof until otherwise indicated in new editions. Make sure you are using the correct edition for your product. Samsung SDS Co., Ltd. has credence in the information contained in this document. However, Samsung SDS is not responsible for any circumstances which arise from inaccurate content or typographical errors. The content and specifications in this document are subject to change without notice. Samsung SDS Co., Ltd. holds all intellectual property rights, including the copyrights, to this document. Using, copying, disclosing to a third party or distributing this document without explicit permission from Samsung SDS is strictly prohibited. These activities constitute an infringement of the intellectual property rights of this company. Any reproduction or redistribution of part or all of these materials is strictly prohibited except as permitted by the license or by the express permission of Samsung SDS Co., Ltd. Samsung SDS Co., Ltd. owns the intellectual property rights in and to this document. Other product and company names referenced in this document are trademarks or registered trademarks of their respective owners. Copyright ⓒ 2016 Samsung SDS Co., Ltd. All rights reserved. Contents Getting Started with Samsung SDS IAM&EMM User Suite 1 Understanding users and roles . .3 Creating user accounts . .5 Bulk import user accounts . .8 Creating roles and adding users to roles . .11 Verifying users have access to Samsung SDS IAM&EMM user portal . .13 Possible next steps . .14 Chapter 1 Commonly used How To scenarios 16 How to configure Mobile Device Management or single sign-on only . .18 How to create a policy set and assign it to users . .22 How to enroll devices . .24 How to define authentication requirements . .28 How to configure and deploy applications to users . .34 How to install a Cloud Connector . .40 How to configure user self-service options . .50 Chapter 2 Services and components overview 54 Component summary . .55 Which software is installed and where . .58 Supported web and device browsers . .60 Supported devices . .61 Foreign language support . .62 Logging in to the user and administrator portals with silent authentication . .63 Samsung SDS IAM&EMM user portal overview . .64 Selecting an identity repository . .65 Selecting a policy service . .66 Chapter 3 Viewing dashboards 67 Displaying user login activity . 68 • i Interpreting the Security Overview dashboard . .69 Chapter 4 Managing users 71 Account sources . .72 Using the Active Directory/LDAP and cloud directory ID repositories . .73 Default user accounts . .74 Managing cloud accounts from the Users page . .75 Referencing accounts from Active Directory/LDAP . .79 Sending invitations to users . .81 Deleting accounts . .83 Specifying a user’s application login settings . .84 Using search filters . .86 Chapter 5 Managing applications 87 Deploying the Samsung SDS IAM&EMM User Portal application . .88 Viewing and sorting applications in the Apps page . .89 Modifying the application description . .91 Configuring automatic versus optional deployment . .92 Setting web application access policies . .93 Managing application access requests . .94 Application symbols . .99 Working with applications that require the Samsung SDS IAM&EMM Browser Extension . .101 Removing an application . .104 Adding web applications by using Admin Portal . .105 Adding web applications by using Samsung SDS IAM&EMM Infinite Apps . 108 Adding and deploying mobile applications using Admin Portal . 112 Android for Work . .115 Deploying web applications to KNOX containers . .120 Deploying mobile applications to KNOX containers . .121 Chapter 6 Managing devices 127 Enrolling a device . .128 Using Admin Portal to manage devices . .133 Using Active Directory Users and Computers to manage devices . .135 Using the device management commands . .138 Admin Portal user’s guide ii Working with Samsung KNOX devices . .145 Chapter 7 Managing policies 157 Using policy sets . .159 General device management settings . .161 Authentication - Setting authentication policy controls . .165 Setting password controls . .173 Configuring OATH OTP . .175 Configuring derived credentials . .176 Managing Application policies . .194 Managing device configuration policies . .195 Mobile device configuration policies overview . .201 Chapter 8 Managing roles 222 Predefined roles . .223 Removing users or groups from a role . .224 Assigning applications to and removing them from roles . .225 Creating cloud service administrators . .226 Deleting roles . .230 Chapter 9 Managing customer cloud services 231 About customer cloud services . .232 Creating an cloud service for a customer . .233 Disabling and enabling a customer cloud service . .235 Logging in to a customer cloud service . .236 Creating roles that can create and manage customer cloud services . .237 Chapter 10 Managing reports 239 What’s in the Report Library . .240 Reports provided in Admin Portal . .241 Access to shared reports and report data . .242 Selecting report data . .244 Common events that you can search for . .249 Working with reports . ..