FAQ: Which MDM's and MAM's can SBM support?

[Phillip_Woon]

Currently Supported:

• Airwatch
• MobileIron Core
• BlackBerry Enterprise Server
• IBM Maas360
• Good Dynamics (or BlackBerry Dynamics as its now called)

Support pending:

• MS Intune
• Citrix ZenMobile

If you have a customer what really wants to buy the best mobile security on the market (ours of course) but needs to deploy with an MDM not mentioned above, there are a few things to consider:

• If they are using just Android, the customer can distribute and manage the app via the Google playstore using the unsupported MDM, yet enroll via emails sent from SBM (using the registration code / QR in the email) with a list of devices imported into SBM from a CSV (your local mobile overlay can supply an example of this CSV formatting)
• If they are also using iOS, the customer can request a copy of the apple IPA package for the SBM agent and distribute with the MDM. The Appstore version will not work unless you enable unsupported MDM mode in the settings of SBM (this will however disable app protection due to a profile conflict, so is a last resort). A CSV of these apple devices will still need to be imported into SBM and an enrollment email sent as there is no MDM connection to collect the device list / sync devices.
• Lastly if there is a big deal on the table that requires us to work with an unsupported MDM in order to win the business, please inform the mobile overlay for your region ASAP!

[Daniel_Dor]

Great post by Phillip Woon​!

Just to add, here is the list of the different capabilites of the different applications in each one of the mentioned applications:

What MDM we have on the  Device?
Category	Capability	Enabled in "None" Configuration?	Enabled in "Airwatch" Configuration?	Enabled in "MobileIron" Configuration?	Enabled in "MaaS360" Configuration?	Enabled in "BES" Configuration?	Enabled in "Non Supported MDM" Configuration?
Provisioning	Get device list from MDM	X	V	V	V	V	X
Provisioning	Get labels/group from MDM	X	V	V	V	V	X
Deployment	Auto deploy iOS (push registration details to device automatically)	X	V	V	V	X	X
Deployment	Auto deploy Android (push registration details to device automatically)	X	V	X (Roadmap)	X	X	X
Detection - iOS App Store App	Get app list iOS	V	V	V	V	X	X
Detection - iOS App Store App	Get network profile (Can be used to blacklist profiles)	V	X	X (Roadmap)	X	X	X
Detection - iOS App Store App	Get Provisioning profile (Can be used to detect 3rd party apps)	V	X	X (Roadmap)	X	X	X
Detection - iOS App Store App	Infected apps detection (Get app list iOS)	V	V	V	V	X	X
Detection - iOS App Store App	MiTM detection capability (on device detection)	V	V	V	V	X	V
Detection - iOS App Store App	Device vulnerabilites detection (We test several things on the device)	V	V	V	V	X	V
Detection - iOS Enterprise App	Get app list iOS	V	V	V	V	V	V
Detection - iOS Enterprise App	Get network profile (Can be used to blacklist profiles)	V	V	V	V	V	V
Detection - iOS Enterprise App	Get Provisioning profile (Can be used to detect 3rd party apps)	V	V	V	V	V	V
Detection - iOS Enterprise App	Infected apps detection (Get app list iOS)	V	V	V	V	V	V
Detection - iOS Enterprise App	MiTM detection capability (on device detection)	V	V	V	V	V	V
Detection - iOS Enterprise App	Device vulnerabilites detection (We test several things on the device)	V	V	V	V	V	V
Detection - Android	Infected apps detection	V	V	V	V	V	V
Detection - Android	MiTM detection capability (on device detection)	V	V	V	V	V	V
Detection - Android	Device vulnerabilites detection (We test several things on the device)	V	V	V	V	V	V
Mitigation	Mitigation	X	V	V	V	v	X
UDM	UDM	X	V	V	X	X	X

[Sergej_Gurenko]

Great FAQ. Can you please update to reflect recent recent Intune addition.

[Vladimir_Yakovl]

Can we have a link to the updated list of supported MDM solutions? I am curious if anyone encountered SBM with Meraki MDM.