iOS 7 delivers some needed enterprise-friendly tweaks
The new mobile OS arrives Sept. 18 with enterprise single sign-on
Computerworld - The big news from Apple last week was, of course, the arrival of the new iPhone 5s and iPhone 5c. But Apple executives also recapped iOS 7, the next version of Apple's mobile OS for iPhones, iPads and the iPod touch.
iOS 7 rolls out on Wednesday, two days before the new phones will be available. And while it has a slew of new features users will like, the updated OS also offers important advances for enterprise users.
iOS 6 already has a number of key enterprise features: mobile management support, the ability to query devices for data like information on installed apps, and a remote wipe option if an iPhone or iPad is lost or stolen. But Apple has until now largely avoided linking iOS devices to enterprise identity systems.
Yes, there's been support for Exchange and ActiveSync since the release of the iPhone 3G five years ago. And most mobile management tools can pull data from enterprise identity systems like Active Directory to determine what policies are enforced or preconfigured on a given user's iPhone or iPad. But that's nowhere near the authentication, authorization, and single sign-on options that Windows PCs (and even modern Macs) deliver.
With iOS 7, that changes in some significant ways. Most importantly, iOS now supports enterprise single sign-on. This is a game-changer because it means that once a user's identity is verified and trusted, enterprise apps or commercial apps that access enterprise data or services won't require users to repeatedly authenticate with their Active Directory or enterprise credentials. Better yet, Apple is making it relatively easy for developers to implement its single sign-on model.
Apple's single sign-on model is itself interesting and somewhat novel. Rather than replicate what's done on the desktop, as many vendors of mobile management systems that support containerization and/or app-wrapping have done, Apple took inspiration from the existing iOS account management architecture.
In early iOS releases, user accounts were pretty much restricted to email services, Exchange and Mobile Me (iCloud's predecessor). Even Exchange support had limitations and supported just a handful of sync options: mail, contacts and calendar data. As Apple built in explicit support for other common services like GMail, AOL and Hotmail, it also added new sync options appropriate to each service. GMail, for instance, sports an option to sync calendars and notes.
Support for Twitter and Facebook accounts arrived with iOS 6, and now iOS 7 builds on that with support for LinkedIn. Of course, these accounts are treated differently by iOS than what are essentially mail and related services. Integrating them into the operating system was less about easy setup or syncing personal information than it was about credential-sharing. With iOS 7, users can simply enter credentials that allow iOS itself, the official Twitter and Facebook apps, and any app with an appropriately coded share sheet to access their accounts without requiring another round of authentication.
As a result, you can post a photo to Facebook directly from the Photos app (or any number of third-party apps) or you can tweet from inside Safari and include a link to the page you're reading. You can even post something without opening any app as long as you include these accounts in the iOS Notification Center. Perhaps most important, you can manage what apps have access to your accounts just as you manage which ones can access your location or your photo library. These restrictions are set under Settings --> Privacy.
- Timeline: How Apple's iOS gained enterprise cred
- China calls the iPhone and iOS 7 threats to national security
- Dev interest in OS X Yosemite is 4X what it was for Mavericks in '13
- The Pangu jailbreak for iOS could turn into a sinister attack
- Apple nails Health timing as fitness app usage soars
- Developer demos iPad split-screen in photos, video
- Microsoft should grab Apple's 'Handoff' for Office
- Developer discovers split screen in iOS 8 code
- Apple opens up iOS, struts Mac-iPhone-iPad integration
- iOS 8 split-screen hints at iPad's enterprise ambition
- SANS: Next-Generation Datacenters = Next-Generation Security This whitepaper takes a look at some new technology that may allow security teams to implement more flexible and capable protection models in...
- SANS: Protecting Virtual Endpoints with McAfee Server Security Suite Essentials SANS review of McAfees Server Security Suite Essentials that address some of the emerging challenges of securing virtual platforms and cloud environments.
- Safeguarding the Next-Generation Data Center Use of virtual and cloud servers has exploded. Unfortunately, security often lags behind. McAfee recommends looking at innovative solutions in order to erect...
- Aberdeen: Securing the Evolving Datacenter This report highlights ways security technologies and services are evolving to provide the visibility and control needed to deploy workloads flexibly in the...
- Is SQL Server AlwaysOn really as powerful? Tips and Tricks from the field With the introduction of AlwaysOn, Windows Clustering Services is now more critical than ever.
- What Does it Take to Deliver a Superior Customer Experience? The Two Top-Rated Online Retailers, B&H Photo and Crutchfield Electronics, Share Their Secrets Discuss practical CX tools and service methods such as contact center agents and the use of realtime speech analytics to help contact center... All iOS White Papers | Webcasts