Apps

The Enterprise Mobility Management (EMM) segments into Mobile Device Management (MDM) and Mobile Application Management (MAM). While MDM enables organizations to secure and control mobile devices, MAM helps with application delivery and management. With the increasing adoption of BYOD, you can typically implement a MAM solution, such as Citrix Endpoint Management. Citrix Endpoint Management assists with application delivery, software licensing, configuration, and application life cycle management. You can require or allow users to also opt into MDM management.

With Citrix Endpoint Management, you secure apps by configuring MAM policies and VPN settings to prevent data leaks and other security threats. Citrix Endpoint Management provides organizations with the flexibility to enroll devices as MAM-only or MDM+MAM.

Along with the ability to deliver apps to mobile devices, Citrix Endpoint Management offers app containerization through MDX technology. The apps are subject to granular policy-based controls. Independent software vendors (ISVs) can apply these controls using the Mobile Apps SDK.

In a corporate environment, users use various mobile apps to aid in their job role. The apps can include apps from the public app store, in-house developed apps, or native apps. Citrix Endpoint Management categorizes these apps as follows:

• Public apps: These apps include free or paid apps available in a public app store, such as the Apple App Store or Google Play. Vendors outside of the organization often make their apps available in public app stores. This option lets their customers download the apps directly from the Internet. You might use many public apps in your organization depending on users’ needs. Examples of such apps include GoToMeeting, Salesforce, and EpicCare apps.
  • If you use the MAM SDK: Obtain the app binaries from your app vendor. Then, integrate the MAM SDK into the app.
  • If you use the MDX Toolkit: Citrix does not support downloading app binaries directly from public app stores, and then wrapping them with the MDX Toolkit for enterprise distribution. To wrap third-party applications, work with your app vendor to get the app binaries. You can then wrap the binaries by using the MDX Toolkit.
  • MAM SDK
  • MDX Toolkit

  Depending on the type of mobile apps you plan to deploy and manage with Citrix Endpoint Management, the underlying configuration might differ. For example, many groups of users with different levels of permissions might consume a single app. In that case you can create separate delivery groups to deploy two separate versions of the same app. Also, you must make sure that the user group membership is mutually exclusive to avoid policy mismatches on users’ devices.

  You can also manage iOS application licensing by using Apple Volume Purchase. This option requires you to register for the Volume Purchase program and configure the Volume Purchase settings in the Citrix Endpoint Management console. That configuration allows you to distribute the apps with the Volume Purchase licenses. Various use cases make it important to assess and plan your MAM strategy before implementing the Citrix Endpoint Management environment. You can start planning your MAM strategy by defining the following:

  • Types of apps: List the different types of apps that you plan to support and categorize them, such as public, native, Web, in-house, or ISV apps. Also, categorize the apps for different device platforms, such as iOS and Android. This categorization helps with aligning the various Citrix Endpoint Management settings that are required for each type of app. For example, a few apps might require use of the Mobile Apps SDK to enable special APIs for interaction with other apps.
  • Network requirements: Configure the settings of apps that have specific network access requirements. For example, certain apps might need access to your internal network through a VPN. Some apps might require Internet access to route access via the DMZ. To allow such apps to connect to the required network, you must configure various settings accordingly. Defining per-app network requirements help in completing your architectural decisions early on, which streamlines the overall implementation process.
  • Security requirements: You can define security requirements to apply to either individual apps or all apps.
    • Settings, such as the MDX policies, apply to individual apps
    • Session and authentication settings apply across all apps
    • Some apps might have specific containerization, MDX, authentication, geofencing, passcode, or data sharing requirements

    Outline those requirements in advance to simplify your deployment. For details on security in Citrix Endpoint Management, see Security and user experience.

    Use Case

    A healthcare organization plans to deploy Citrix Endpoint Management to serve as a MAM solution for their mobile apps. Mobile apps are delivered to corporate and BYOD users. IT decides to deliver and manage the following apps:

    Mobile productivity apps: iOS and Android apps provided by Citrix. For details, see Mobile productivity apps.

    Citrix Secure Hub: For customers who onboarded before Citrix Endpoint Management 10.18.14: You push security settings, configurations, and mobile apps to mobile devices by using Citrix Secure Hub. Android and iOS devices enroll in Citrix Endpoint Management through Citrix Secure Hub.

    For new customers from Citrix Endpoint Management 10.18.14: Citrix Secure Hub supports the use of the Workspace app store. When opening Citrix Secure Hub, users no longer see the Citrix Secure Hub store. Now, an Add Apps button takes users to the Workspace apps store.

    The following is a video that shows an iOS device performing an enrollment to Citrix Endpoint Management using the Citrix Workspace app.

    Citrix Workspace app: The Citrix Workspace app incorporates existing Citrix Receiver technology, Citrix Secure Hub, and other Citrix Workspace client technologies. Citrix Workspace app provides end users with a unified, contextual experience.

    GoToMeeting: An online meeting, desktop sharing, and video conferencing client that lets users meet with other computer users, customers, clients, or colleagues via the Internet in real time.

    SalesForce1: Salesforce1 lets users access Salesforce from mobile devices and brings all Chatter, CRM, custom apps, and business processes together in a unified experience for any Salesforce user.

    RSA SecurID: Software-based token for two-factor authentication.

    EpicCare apps: These apps give healthcare practitioners secure and portable access to patient charts, patient lists, schedules, and messaging.

    Haiku: Mobile app for the iPhone and Android phones.

    Canto: Mobile app for the iPad

    Rover: Mobile apps for iPhone and iPad.

    HDX: These apps are delivered via Citrix Virtual Apps in Citrix Workspace.

    • Epic Hyperspace: Epic client application for electronic health record management.

    ISV:

    • Vocera: HIPAA compliant voice-over IP and messaging mobile app that extends the benefits of Vocera voice technology anytime, anywhere via iPhone and Android smartphones.

    In-house apps:

    • HCMail: App that helps compose encrypted messages, search address books on internal mail servers, and send the encrypted messages to the contacts using an email client.

    In-house web apps:

    • PatientRounding: Web application used to record patient health information by different departments.
    • Outlook Web Access: Allows the access of email via a web browser.
    • SharePoint: Used for organization-wide file and data sharing.

    The following table lists the basic information required for MAM configuration.

    App Name	App Type	MDX-enabled	iOS	Android
    Citrix Secure Mail	Mobile productivity app	No	Yes	Yes
    Citrix Secure Web	Mobile productivity app	No	Yes	Yes
    Citrix Files	Mobile productivity app	No	Yes	Yes
    Citrix Secure Hub	Public App	N/A	Yes	Yes
    Citrix Workspace app	Public App	N/A	Yes	Yes
    GoToMeeting	Public App	N/A	Yes	Yes
    SalesForce1	Public App	N/A	Yes	Yes
    RSA SecurID	Public App	N/A	Yes	Yes
    Epic Haiku	Public App	N/A	Yes	Yes
    Epic Canto	Public App	N/A	Yes	No
    Epic Rover	Public App	N/A	Yes	No
    Epic Hyperspace	HDX App	N/A	Yes	Yes
    Vocera	ISV App	Yes	Yes	Yes
    HCMail	In-House App	Yes	Yes	Yes
    PatientRounding	Web App	N/A	Yes	Yes
    Outlook Web Access	Web App	N/A	Yes	Yes
    SharePoint	Web App	N/A	Yes	Yes

    The following table lists specific requirements that you can consult configuring MAM policies in Citrix Endpoint Management.

    App Name	VPN Required	Interaction (with apps outside of container)	Interaction (from apps outside of container)	Proxy Filtering	Licensing	Geo-fencing	Mobile Apps SDK	Minimum Operating System Version
    Citrix Secure Mail	Y	Selectively Allowed	Allowed	Required	N/A	Selectively Required	N/A	Enforced
    Citrix Secure Web	Y	Allowed	Allowed	Required	N/A	Not required	N/A	Enforced
    Citrix Files	Y	Allowed	Allowed	Required	N/A	Not required	N/A	Enforced
    Citrix Secure Hub	Y	N/A	N/A	Not required	Volume Purchase	Not required	N/A	Not enforced
    Citrix Workspace app	Y	N/A	N/A	Not required	Volume Purchase	Not required	N/A	Not enforced
    GoToMeeting	N	N/A	N/A	Not required	Volume Purchase	Not required	N/A	Not enforced
    SalesForce1	N	N/A	N/A	Not required	Volume Purchase	Not required	N/A	Not enforced
    RSA SecurID	N	N/A	N/A	Not required	Volume Purchase	Not required	N/A	Not enforced
    Epic Haiku	Y	N/A	N/A	Not required	Volume Purchase	Not required	N/A	Not enforced
    Epic Canto	Y	N/A	N/A	Not required	Volume Purchase	Not required	N/A	Not enforced
    Epic Rover	Y	N/A	N/A	Not required	Volume Purchase	Not required	N/A	Not enforced
    Epic Hyperspace	Y	N/A	N/A	Not required	N/A	Not required	N/A	Not enforced
    Vocera	Y	Blocked	Blocked	Required	N/A	Required	Required	Enforced
    HCMail	Y	Blocked	Blocked	Required	N/A	Required	Required	Enforced
    PatientRound-ing	Y	N/A	N/A	Required	N/A	Not required	N/A	Not enforced
    Outlook Web Access	Y	N/A	N/A	Required	N/A	Not required	N/A	Not enforced
    SharePoint	Y	N/A	N/A	Required	N/A	Not required	N/A	Not enforced

    The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

    DIESER DIENST KANN ÜBERSETZUNGEN ENTHALTEN, DIE VON GOOGLE BEREITGESTELLT WERDEN. GOOGLE LEHNT JEDE AUSDRÜCKLICHE ODER STILLSCHWEIGENDE GEWÄHRLEISTUNG IN BEZUG AUF DIE ÜBERSETZUNGEN AB, EINSCHLIESSLICH JEGLICHER GEWÄHRLEISTUNG DER GENAUIGKEIT, ZUVERLÄSSIGKEIT UND JEGLICHER STILLSCHWEIGENDEN GEWÄHRLEISTUNG DER MARKTGÄNGIGKEIT, DER EIGNUNG FÜR EINEN BESTIMMTEN ZWECK UND DER NICHTVERLETZUNG VON RECHTEN DRITTER.

    CE SERVICE PEUT CONTENIR DES TRADUCTIONS FOURNIES PAR GOOGLE. GOOGLE EXCLUT TOUTE GARANTIE RELATIVE AUX TRADUCTIONS, EXPRESSE OU IMPLICITE, Y COMPRIS TOUTE GARANTIE D'EXACTITUDE, DE FIABILITÉ ET TOUTE GARANTIE IMPLICITE DE QUALITÉ MARCHANDE, D'ADÉQUATION À UN USAGE PARTICULIER ET D'ABSENCE DE CONTREFAÇON.

    ESTE SERVICIO PUEDE CONTENER TRADUCCIONES CON TECNOLOGÍA DE GOOGLE. GOOGLE RENUNCIA A TODAS LAS GARANTÍAS RELACIONADAS CON LAS TRADUCCIONES, TANTO IMPLÍCITAS COMO EXPLÍCITAS, INCLUIDAS LAS GARANTÍAS DE EXACTITUD, FIABILIDAD Y OTRAS GARANTÍAS IMPLÍCITAS DE COMERCIABILIDAD, IDONEIDAD PARA UN FIN EN PARTICULAR Y AUSENCIA DE INFRACCIÓN DE DERECHOS.

    本服务可能包含由 Google 提供技术支持的翻译。Google 对这些翻译内容不做任何明示或暗示的保证，包括对准确性、可靠性的任何保证以及对适销性、特定用途的适用性和非侵权性的任何暗示保证。

    このサービスには、Google が提供する翻訳が含まれている可能性があります。Google は翻訳について、明示的か黙示的かを問わず、精度と信頼性に関するあらゆる保証、および商品性、特定目的への適合性、第三者の権利を侵害しないことに関するあらゆる黙示的保証を含め、一切保証しません。

    ESTE SERVIÇO PODE CONTER TRADUÇÕES FORNECIDAS PELO GOOGLE. O GOOGLE SE EXIME DE TODAS AS GARANTIAS RELACIONADAS COM AS TRADUÇÕES, EXPRESSAS OU IMPLÍCITAS, INCLUINDO QUALQUER GARANTIA DE PRECISÃO, CONFIABILIDADE E QUALQUER GARANTIA IMPLÍCITA DE COMERCIALIZAÇÃO, ADEQUAÇÃO A UM PROPÓSITO ESPECÍFICO E NÃO INFRAÇÃO.