SAP HANA Cloud Platform, mobile service for app and device management Document Version: 1.0 2016-09-18 CUSTOMER
Content 1 Solutions....4 2 SAP HANA Cloud Platform, mobile service for app and device management Portal....5 3 Organization and Associated Subsidiary Accounts....6 4 Logging onto the SAP HANA Cloud Platform, mobile service for app and device management Administrator Portal....7 5 Analytics....8 6 Application Management.... 9 6.1 Mobile Place Versus MDM Client to Distribute Applications....9 6.2 Adding an Enterprise Application...10 6.3 Adding a Web Application....15 6.4 Adding an ios or Windows Application from a Commercial App Store... 19 6.5 Adding an Android Application from a Commercial App Store...23 6.6 Adding an OS X Configuration Payload...28 6.7 Adding a New Application Category...32 6.8 Approving or Rejecting Apps....33 6.9 Protecting Applications....34 6.10 Wrapping Applications....36 6.11 Updating an Enterprise Application...37 6.12 Configuration Discovery Service....41 Using the Configuration Discovery Service....42 7 Device Management....45 7.1 Viewing Dashboard...45 7.2 Administering Devices....45 Adding Substitution Variables to Enrollment Policies....45 8 User Management....46 8.1 Adding Users...46 8.2 Editing User Details....48 8.3 Roles....48 8.4 Configuring View Settings.... 52 8.5 Importing Lists of Mobile Place Users...52 8.6 Exporting Lists of Users....53 8.7 Migrating Users to the SAP Cloud Identity Service...54 2 C U S T O M E R Content
8.8 Deleting Users....54 9 Group Management....56 9.1 Creating Static Groups....56 9.2 Creating Directory Groups....57 10 Account Management....58 10.1 Setting Language for SAP HANA Cloud Platform, mobile service for app and device management...59 10.2 Updating Mobile Place Settings....59 10.3 Customizing Mobile Place.... 60 10.4 Customizing SAP HANA Cloud Platform, mobile service for app and device management.... 62 10.5 Configuring Single Sign-On (SSO) for Mobile Place....63 10.6 Managing Device Settings.... 65 Configuring Google Cloud Messaging....65 Android for Work....66 Auto-Discovery Support for Windows Phone Enrollment.... 74 Creating and Configuring the Auto-Discovery Server....74 10.7 Managing My Profile.... 75 Generating API Credentials....76 10.8 Signing Profiles....76 Creating a Signing Profile.... 76 Editing a Signing Profile....77 Deleting a Signing Profile....77 10.9 Device Test Cloud Service.... 78 Configuring the Device Test Cloud Service.... 78 Using the Device Test Cloud Service....79 10.10 Health Dashboard....80 Content C U S T O M E R 3
1 Solutions SAP HCP, mobile service for app and device management allows you to customize and manage an enterprise app catalog and secure, manage, and monitor mobile devices. Mobile Device Management is the trusted solution for managing and securing mobile device deployments in companies of any size. Mobile Device Management quickly self-enroll devices for enterprise use; preconfigure settings to enforce security and compliance policies. Highly secure and scalable remotely lock and wipe managed devices, and control security settings for bring-your-own-device (BYOD) or corporate-owned devices. Robust analytics gain instant insight into mobile device usage and the ability to take immediate action. Mobile Application Management manage and secure applications (enterprise or commercial app store) on your devices. Mobile Place is the end-user portal for SAP HANA Cloud Platform, mobile service for app and device management for enrolling Android, ios, and Windows Phone devices. It combines the best features of Mobile Application Management (MAM) and Mobile Device Management (MDM), and provides a single interface into the Enterprise Mobility Management (EMM) environment for both managed and unmanaged users and devices to enable, discover, and consume mobile services that are exposed by their enterprise. Add, modify, and delete applications. Customize, brand, and localize the app catalog experience to serve employees and partners. Approve applications that can be consumed by users. 4 C U S T O M E R Solutions
2 SAP HANA Cloud Platform, mobile service for app and device management Portal Either a trial user or an enterprise user can access the SAP HANA Cloud Platform, mobile service for app and device management portal. To explore the product on a trial basis for 30 days, go to the SAP HCP, mobile service for app and device management Website and click on Free Trial. For more information, refer to the Getting Started Guide and other product documents that are available on SAP Help Portal. If you are an enterprise user, go to the SAP HCP, mobile service for app and device management Website and click My Cloud to log in and access the SAP HANA Cloud Platform, mobile service for app and device management portal. SAP HANA Cloud Platform, mobile service for app and device management Portal C U S T O M E R 5
3 Organization and Associated Subsidiary Accounts If your organization has multiple discrete subsidiaries, and each of these subsidiaries have a separate SAP HANA Cloud Platform, mobile service for app and device management account, you might want to create an organization account, and link one or more associated subsidiary SAP HANA Cloud Platform, mobile service for app and device management accounts under the organization account. This enables the organization admin users to manage associated accounts seamlessly. To set up this structure in your organization, contact the SAP Support team. For example, if organization A has multiple subsidiaries A1, A2, and A3, SAP support team will create an organization account for organization A and associate subsidiary accounts of A1, A2, and A3 to the organization account A. This is applicable only for the Classic Admin portal. Once the organization-subsidiary account structure is set up, on the SAP HANA Cloud Platform, mobile service for app and device management Admin portal, you can log on to the organization account to: Access information about the current logged in Organization account and subsidiary account. Create user in the Organization account and link them to one or more subsidiary accounts. Alternatively, you can create users in the Subsidiary account level. However, user created in the subsidiary account cannot access the organization account. If you are an organization user linked to one or more subsidiary account, you cannot login to subsidiary account directly. Instead, log on to the organization account and then use Switch option to access the subsidiary account. Select Switch Account to switch between the available subsidiary accounts in Organization account. The Switch Account option is available if you have at least one subsidiary account under the current Organization account. Although using organization and subsidiary accounts is an optional feature, the organization account must exist before you can associate subsidiary accounts to it. 6 C U S T O M E R Organization and Associated Subsidiary Accounts
4 Logging onto the SAP HANA Cloud Platform, mobile service for app and device management Administrator Portal Manage all the devices and applications within your enterprise from the SAP HANA Cloud Platform, mobile service for app and device management administrator portal. As an administrator, you can log in to the portal using the credentials you received when you created your account. Logging onto the SAP HANA Cloud Platform, mobile service for app and device management Administrator Portal C US TO M E R 7
5 Analytics Use built-in robust analytics for instant insight into mobile device usage or applications usage; and the ability to take immediate action. Select Analytics > Devices tab. Only users who are assigned the Account Administrator or Reports User roles can view these reports. Devices by platform - managed devices by operating system. Jailbreak status - managed devices by jailbreak/root status. Devices trend analysis - represented as a line graph, device enrollment over time by operating system. Devices by owner - managed devices by owner, with personal (BYOD) or enterprise provided. Devices by OS version - managed devices across operating system version. Device by compliance status - managed devices by compliance status for each operating system. Devices by platform across SAP Fiori mobile service - devices by operating system across all SAP HANA Cloud Platform, mobile service for SAP Fiori customers. Select Analytics > Applications tab to view the following reports: Apps downloaded by platform - total number of apps downloaded through SAP HANA Cloud Platform, mobile service for SAP Fiori cloud to each OS platform. Apps trend analysis - total number of apps downloaded over time for each OS platform. Top 10 popular apps - the most popular applications installed on mobile devices by OS platform. Top 10 managed apps - the most popular SAP HANA Cloud Platform, mobile service for SAP Fiori installed applications by OS platform. Select Analytics > Custom tab to create and view custom reports using SAP Lumira Launchpad capabilities. For more information on how to create custom reports using SAP Lumira Launchpad capabilities, see SAP Lumira Server User Guide. If the user account is created in the organization s SAP HANA Cloud Platform, mobile service for SAP Fiori account and is associated with the subsidiary SAP HANA Cloud Platform, mobile service for SAP Fiori accounts, that user can view information about both types of account (i.e. Organization and Subsidiary account). The user can consequently log on as organization user to access cumulative information or switch to subsidiary account to access account specific information. Some features such as sharing datasets and stories, are not applicable in SAP HANA Cloud Platform, mobile service for SAP Fiori. Additionally, only historical data is aggregated. 8 C U S T O M E R Analytics
6 Application Management A system administrator can manage the applications (enterprise or commercial app store) that are made available on Mobile Place for end users from the SAP HANA Cloud Platform, mobile service for app and device management portal. Click the Applications tab in the SAP HANA Cloud Platform, mobile service for app and device management portal, then select the appropriate subtab. Manage Apps tab - add new applications, add new categories for applications, search for applications, edit existing applications, delete applications, and retire applications. You can delete an application only if there are no supported platforms for it. Subtabs: Approve Apps tab - approve or reject apps for use. Only a user App Catalog Admin role can perform this operation. App Protection tab - wrap an enterprise application with security and usage policies to help protect data, limit usage, and control access. Only a user who is assigned the MAP Admin role can perform this operation. You cannot wrap a commercial app store application. Configure App Discovery tab - set up application connection information for unconfigured applications, as well as deliver user identity certificates to users' devices. 6.1 Mobile Place Versus MDM Client to Distribute Applications The MDM client and the Mobile Place application catalog can both perform application distribution. Applications that are ready for distribution might appear in either the MDM client, or in the Mobile Place application catalog, or both. Mobile Place includes a multichannel app store. This means that delivery can be done in MAM mode or MDM mode. If you are not leveraging the SAP HANA Cloud Platform, mobile service for app and device management cloud s MDM features,you can use only Mobile Place to manage applications. The MDM client does not exist on the device and therefore cannot be used. Create application policies that need the Required flag to be enabled (effective on ios and Samsung SAFE/ KNOX) in the MDM console, and deploy them directly. Application Management C U S T O M E R 9
6.2 Adding an Enterprise Application An App Catalog AdministratMobile Placeor or an App Catalog Publisher can add a enterprise application published on. Procedure 1. Click Applications. 2. From the Manage Apps tab, click New Application. 3. Select Enterprise Application and click Next. 4. Enter the following information in the Details page: Language - Select a language from the list. The languages that appear depend on the language settings on the Account Settings Mobile Place page. Name - Enter a name for the new application. The name cannot exceed 200 characters, including spaces. Description - Enter a description for the new application. The description cannot exceed 4000 characters, including spaces. HTML content is supported. You can also apply styles to the description text, such as different fonts, text color, background color and insert or unlink URLs. Select any text to enable the Insert/Edit Link control. In the Insert/Edit Link window. 1. Enter the link URL. 2. In the Target field, specify whether the link is opened in the current window or a new one. 3. Enter the title and click Insert. Applying styles on the text affects the number of characters. Minimize style effects to maximize the number of characters you can enter. (Optional) Keywords - Enter keywords separated by commas that help users search for, and retrieve, new applications. Keywords cannot exceed 60 characters. 5. (Optional) Select one or all of the following options: Deploy to managed devices only Mark as featured app Accessible to unauthenticated users By default, the check box Accessible to unauthenticated users is disabled. This checkbox is enabled only if unauthenticated access is enabled from Account Settings Mobile Place page. If Accessible to unauthenticated users check box is selected, an application is visible to unauthenticated users only. 10 C U S T O M E R Application Management
You can not select both the check boxes Deploy to managed devices only and Accessible to unauthenticated users at the same time. 6. Click Save to save the information on the Details page. 7. Click Groups, and select the visibility of the application to all users, or only to selected groups. You can search for an existing group by typing the group name in the search groups window. Use the Actions icon to sort the list based on group name, or apply filters to search for a group. You can also create a new group, if required, by selecting the static or directory group option from the New group drop-down list. The newly created group is selected, by default. For more information on how to create groups, see Group Management section. 8. If you have chosen to show the application only to selected groups, select the required groups from the list. 9. Click Multimedia. Upload an application icon or banner image by clicking Browse. The application icon must support the following properties: Only png, jpeg, and jpg file formats are supported. The recommended resolution is 76px X 76px. You can upload only one application icon. If you do not upload an application icon, the default application icon (the image that appears below the Application icon field) is used. The banner image must support the following properties: Only png, jpeg, and jpg file formats are supported. The recommended resolution should be 1024px X 230px. You can upload only one banner image. 10. Click Save to save the information on the Multimedia page. 11. Click Categories. To add a new application to available categories, double-click or drag and drop categories from the Available box to the Selected box. 12. Click Save to save the information on the Categories page. 13. Click Owner info to view owner information of a application and select up to five co-owners for a new application. 14. Click the Edit App Owner icon to change the application owner. Only users with App Catalog Admin role can edit the application owner. The Select Owner dialog is displayed. Only users who have App Catalog Admin and App Publisher roles are displayed. 15. Click on the radio button to select the user and click OK. App owner information is updated in the Owner info page. 16. Click Add Co-Owner to add new co-owner(s). The Select co-owners dialog is displayed. Application Management C US TO M E R 11
17. Search for a co-owner by username, first name, last name, or email address. Only users who are assigned the App Catalog Admin role or App Publisher role can be selected as coowners. 18. Select the checkbox to select a co-owner. 19. Click OK. Selected co-owners now appear on the Owner info page. 20.Click Save to save the Owner info page. 21. Click Supported platforms to add application binary and details for a specific application platform. 22. Click Get Started. 23.(Application owners or co-owners only) On the Add New Platform page: Select the OS platform. Specify the form factor if the new app is for tablet or phone. If you selected ios as the platform, select one of the following options for providing the mobile provisioning file: Embedded - ios mobile provisioning file is embedded in the IPA file. This option is the default. External - Browse for an ios mobile provisioning file, to upload with the application. You can upload an ios mobile provisioning file even if the application is in production state. If you selected Android as the platform, select the supported configurations: Base Android - For an Android enterprise application which can be deployed to a device with any Android OS version. Android for Work Native - For an Android for Work market application which can be deployed to a device with Android OS version 5.0 and higher. If the Mobile Place domain is enrolled with AfW, both options are selected by default. The minimum OS version is set to 5.0 for Android for Work Native. Browse to, and upload the app binary. The app binary must be smaller than 250 MB. The upload of.appx or.appxbundle files is not supported for Windows Phone 8.1 or higher devices. In case of the Android for Work Native, the app binary must be uploaded and published directly to your private channel Google Work store. Select the minimum OS version that the new app will support. 24.Click Multimedia to add videos and screenshots. For the application image or screenshot: Only png, jpeg, and jpg file formats are supported. The recommended resolution is 244px X 244px (thumbnail) and 640px X 480px if the image is expanded by clicking the thumbnail. For the video: Only mp4 file type is allowed. The maximum file size cannot exceed 35 MB. 25. Click Documents to add a document that contains additional information about the new application. Only doc, pdf, txt, ppt, pptx, and docx file types are allowed. 12 C U S T O M E R Application Management
The maximum file size of each document cannot exceed 35 MB. 26.Click Trial users to add one or more trial user who can test the application before it is published to all users. 27. Click Add Trial User. The Select Trial Users dialog is displayed. 28.Search trial users by username, first name, last name, or email address and select the checkbox. Only users who are assigned the Mobile Place User role can be designated as trial user. 29.Click OK to close the Select Trial Users dialog. Selected trial users now appears on the Trial users page. 30.Click Save when prompted, to accept the updated supported OS and app version information. 31. Click OK to upload your new application. 32.Click OK to close the Edit Platform dialog. The Supported Platforms page is updated with supported OS version and app version information. 33.Click Save to save the supported platforms information. 34.On the Supported Platforms page, click the Actions icon to: Approve - send a notification to the App Catalog Administrator to approve if the platform state is in trial or production requested state. On approving a trial request or a production request, the Application Notification dialog appears. Choose whether to send the application notification to all subscribed users or to not send the notification. Reject - send a notification to App Catalog Administrator to reject if the platform state is in trial or production requested state. On rejecting a trial request or a production request, the Reject Trial Request or Reject Production Request dialog is displayed and a reason must be provided by the App Catalog Administrator. Additional comments (optional) may also be provided. Request Trial - send a request to the App Catalog Administrator to publish the application in Mobile Place App Catalog for trial users to test the app. Set to Trial - send a notification to App Catalog Administrator to publish the application on the Mobile Place App Catalog for only trial users to install and test the app. Request Production - send a notification to the App Catalog Administrator to publish the application on the Mobile Place App Catalog to all the end users. If you modify or add a new platform and select this option, any existing platforms are removed from Mobile Place. Click OK to continue or Cancel to retain the current platform information. Set to Production - send a notification to the App Catalog Administrator to publish the application on the Mobile Place App Catalog for all users to access and install the application. On setting it to production, the Application Notification dialog appears. Choose whether to send the application notification to all subscribed users or to not send the notification. If you modify or add a new platform, and select Request Production or Set to Production, any existing platforms from Mobile Place. Click OK to continue or click Cancel to retain the current platform information. Application Management C US TO M E R 13
Retire - send a notification to the App Catalog Administrator to retire the application if it is in production. Once an application is retired, end users can no longer download it. However, users who have already installed the app can continue to use it. Delete - send a notification to the App Catalog Administrator to delete a retired application that is in production (when in New and Trial state but not in Requested state). If the application is in New state, the application can be deleted by the publisher as well. 35. You can also click the Edit icon in the Supported Platforms page to edit the platform. Publisher can edit any non-binary information in the "New" state. A user who is assigned the administrator rights can edit any nonbinary information at any point of time except that he cannot change anything once the application supported platform is in "Production" state. The application workflow state transition for App Catalog Admin role and App Catalog Publisher role is described in the tables below. Table 1: App Catalog Admin Role - Application Workflow State Transition State Can Edit Available Action Items New Yes, except OS platform and binary Request Trial, Set to Trial, Request Production, Set to Production, Delete Trial Requested Yes, except OS platform and binary Approve, Reject Trial Yes, except OS platform and binary Request Production, Set to Production, Delete Production Requested Yes, except OS platform and binary Approve, Reject Production No Retire Retired No Delete Table 2: App Catalog Publisher Role - Application Workflow State Transition State Can Edit Available Action Items New Yes, except OS platform and binary Request Trial, Request Production, Delete Trial Requested No None Trial No Request Production Production Requested No None Production No None Retired No None 14 C U S T O M E R Application Management
6.3 Adding a Web Application An App Catalog Administrator or an App Catalog Publisher can add a Web application to publish an application on Mobile Place. Procedure 1. Click Applications. 2. From the Manage Apps tab, click New Application. 3. Select Web Application and click Next. 4. On the Details page: URL - Enter the full URL of the Web application along with the appropriate http:// or https:// prefix. Language - Select a language. The languages that are available depend on the language settings set on the Account Settings Mobile Place page. Name - On entering the URL, the Name field is automatically retrieved from the <title> element of the Web application; however you can edit it here. The name cannot exceed 250 characters including spaces. Description - Enter a description for the new application. The description cannot exceed 4000 characters including spaces. HTML content is supported. You can also apply styles to the description text, such as different fonts, text color, background color, and insert or unlink URLs.. After entering the text, select the text and Insert/Edit Link control. In the Insert/Edit Link window is displayed. Perform the following steps: 1. Enter the link URL. 2. In the Target field, specify whether the link is opened in the current window or a new one. 3. Enter the title and click Insert. Applying styles on the text affects the number of characters. Minimize style effects to maximize the number of characters you can enter. (Optional) Keywords - Enter keywords separated by commas that will help users in searching and retreiving the new Web application. Keywords must not exceed 100 characters. 5. (Optional) Select one or all of the following options: Deploy to managed devices only (Only Managed users) Mark as featured app Accessible to unauthenticated users By default, the checkbox Accessible to unauthenticated users is disabled. This checkbox is enabled only if unauthenticated access is enabled from Account Settings Mobile Place page. If Accessible to unauthenticated users check box is selected, an application is visible to unauthenticated users only. Application Management C US TO M E R 15
You can not select both the check boxes Deploy to managed devices only and Accessible to unauthenticated users at the same time. 6. Click Save to save the information on the Details page. 7. Click Groups, and select the visibility of the application to all users, or only to selected groups. You can search for an existing group by typing the group name in the search groups window. Use the Actions icon to sort the group list based on group name, or apply filters to search for a group. You can also create a new group, if required, by selecting the static or directory group option from the New group drop-down list. The newly created group is selected, by default. For more information on how to create groups, see Group Management section. 8. If you have chosen to show the application only to selected groups, select the required groups from the list. 9. (Optional) Click Multimedia. Upload an application icon or banner image that wiill appear in Mobile Place by clicking Browse button. The application icon must support the following properties: Only png, jpeg, and jpg file formats are supported. The recommended resolution is 76px X 76px. You can upload only one application icon. Icon will be retrieved from the <link rel="apple-touch-icon" href="[icon]> if one exists. If you do not upload an application icon, then the default application icon (below the Application icon field) is used. The banner image must support the following properties: 10. Click Save. Only png, jpeg, and jpg file formats are supported. The recommended resolution should be 1024px X 230px. You can upload only one banner image. Banner image is required if the app is marked as "Featured". 11. (Optional) Click Documents to add a document that describe more information about your new application. Only doc, pdf, txt, ppt, pptx, and docx file types are allowed. The maximum file size of each document cannot exceed 35 Mb. 12. Click Save to save the Documents page. 13. (Optional) Click Categories. To add a new Web application to available categories, double-click or drag and drop categories from Available box to Selected box. 14. Click Save to save the information in the Categories page. 15. Click Owner info to view owner information of a application and select up to five co-owners for a new application. 16. Click the Edit App Owner icon to change the application owner. Only users with App Catalog Admin role can edit the application owner. The Select Owner dialog is displayed. 16 C U S T O M E R Application Management
Only users who have App Catalog Admin and App Publisher roles are displayed. 17. Click on the radio button to select the user and click OK. App owner information is updated in the Owner info page. 18. Click Add Co-Owner to add new co-owner(s). The Select co-owners dialog is displayed. 19. Search for a co-owner by username, first name, last name, or email address and select the checkbox to select a co-owner. Only users who are assigned the App Catalog Admin role or App Publisher role can be selected as coowners. 20.Click OK to close the Select Co-Owners dialog. Selected co-owners that were selected now appear in the Owner info page. 21. Click Save to save the information in the Owner info page. 22. Click Supported platforms to add application binary and details for a specific application platform. 23.Click Get Started. 24.On the Add New Platform page: Select the OS platform. Specify the form factor if the new app is for tablet or phone. From the Operating Systems Versions section, select the minimum OS version that the new app will support from the drop-down box. 25. Click Trial users to add a new trial user who can test the Web application before it is published to all users. 26.Click Add Trial User. The Select Trial Users dialog is displayed. 27. Search trial users using username, first name, last name, or email address and select the checkbox against the trial user. Only users who have Mobile Place User role is displayed. 28.Click OK to close the Select Trial Users dialog. 29.Click OK to close the Edit Platform dialog. The Supported Platforms page is updated with supported OS version and Web application version information. 30.Click Save. 31. On the Supported Platforms page, click the Actions icon to: Approve - send a notification to the request App Catalog Administrator to approve if the platform state is in trial or production requested state. On approving a trial request or a production request, the Application Notification dialog appears. Choose whether to send the application notification to all subscribed users or to not send the notification. Reject - send a notification to App Catalog Administrator to reject if the platform state is in trial or production requested state. On rejecting a trial request or a production request, the Reject Trial Request Application Management C US TO M E R 17
or Reject Production Request dialog is displayed and a reason must be provided by the App Catalog Administrator. Additional comments (optional) may also be provided. Request Trial - request the App Catalog Administrator to publish the Web application in Mobile Place App Catalog for trial users to test the app. Set to Trial - send a request for the App Catalog Administrator to publish the Web application on the Mobile Place App Catalog for only trial users to install and test the app. Request Production - send a request to App Catalog Administrator to publish the Web application on the Mobile Place App Catalog to all the end users. any existing platforms are removed from Mobile Place. Click OK to continue or Cancel to retain the current platform information. Set to Production - For the App Catalog Administrator to publish the Web application on the Mobile Place App Catalog for all users to access and install the application. On setting it to production, the Application Notification dialog appears. Choose whether to send the application notification to all subscribed users or to not send the notification. If you modify or add a new platform, and select Request Production or Set to Production, any existing platforms from Mobile Place. Click OK to continue or click Cancel to retain the current platform information. Retire - For the App Catalog Administrator to retire the Web application if it is in production. Once an application is retired, However, users who have already installed the app can continue to use it. Delete - For the App Catalog Administrator to delete a retired Web application that is in production (when in new and trial state but not in requested state). If the Web application is in new state, the Web application can be deleted by the publisher as well. 32.You can also click the Edit icon in the Supported Platforms page to edit the platform. Publisher can edit any non-binary information in the "New" state. A user who is assigned administrator rights can edit any nonbinary information at any point of time except that he cannot change anything once the application supported platform is in "Production" state. The application workflow state transition for App Catalog Admin role and App Catalog Publisher role is described in the tables below. Table 3: App Catalog Admin Role - Application Workflow State Transition State Can Edit Available Action Items New Yes, except OS platform and binary Request Trial, Set to Trial, Request Production, Set to Production, Delete Trial Requested Yes, except OS platform and binary Approve, Reject Trial Yes, except OS platform and binary Request Production, Set to Production, Delete Production Requested Yes, except OS platform and binary Approve, Reject Production No Retire Retired No Delete 18 C U S T O M E R Application Management
Table 4: App Catalog Publisher Role - Application Workflow State Transition State Can Edit Available Action Items New Yes, except OS platform and binary Request Trial, Request Production, Delete Trial Requested No None Trial No Request Production Production Requested No None Production No None Retired No None 6.4 Adding an ios or Windows Application from a Commercial App Store An App Catalog Administrator or an App Catalog Publisher can add an ios or Windows application from a commercial app store to be published on Mobile Place. Procedure 1. Click Applications. 2. From the Manage Apps tab, click New Application. 3. Select Commercial App Store and select one of the following: 4. Click Next. Apple App Store Windows Phone Store 5. On the Details page: Country - Select a country. The Country field is disabled on Windows Phone devices. Language - Select a language. Only English is supported for Windows commercial applications. The languages that appear depends on the language settings set in the Account Settings Mobile Place page. If you select: Name - Enter the name of the application. After you save the application, you cannot edit the name of the application. URL - Copy the URL of the application from the app store. (Optional) Description - If you select: Application Management C US TO M E R 19
App Store: The information in the description field is automatically populated from the app store. You cannot edit this information. Enterprise: Enter custom description or information for this app. App publisher or app catalog admin can: select only one type of description for the app to be published to the Mobile Place users switch to any type of description at any point of time. Last save description will be published to the Mobile Place users (Optional) Keywords - Enter keywords separated by commas that will help users in searching and retrieving the new application. Each keyword cannot exceed 60 characters. 6. (Optional) Select one or all of the following options: Deploy to managed users only - The application is accessible only to Managed users. Mark as featured app - The application will appear on the banner area in Mobile Place and you will be prompted to provide a banner image Accessible to unauthenticated users By default, the checkbox Accessible to unauthenticated users is disabled. This checkbox is enabled only if unauthenticated access is enabled from Account Settings Mobile Place page. If Accessible to unauthenticated users check box is selected, an application is visible to unauthenticated users only. 7. Click Save. You can not select both the check boxes Deploy to managed devices only and Accessible to unauthenticated users at the same time. The platform is also created. You can add only one platform. 8. Click Groups, and select the visibility of the application to all users, or only to selected groups. You can search for an existing group by typing the group name in the search groups window. Use the Actions icon to sort the list based on group name, or apply filters to search for a group. You can also create a new group, if required, by selecting the static or directory group option from the New group drop-down list. The newly created group is selected, by default. For more information on how to create groups, see Group Management section. 9. If you have chosen to show the application only to selected groups, select the required groups from the list. 10. Click Multimedia. Upload an application icon or banner image by clicking Browse. If an application is a featured application, then banner image must be uploaded. The banner image must support the following properties: 20 C U S T O M E R Application Management
Only png, jpeg, and jpg file formats are supported. The recommended resolution should be 1024px X 230px. You can upload only one banner image. 11. Click Save to save the information on the Multimedia page. 12. Click Categories. To add a new application to available categories, double-click or drag and drop categories from the Available box to the Selected box. 13. Click Save. 14. Click Owner info to view owner information of a application and select up to five co-owners for a new application. 15. Click the Edit App Owner icon to change the application owner. Only users with App Catalog Admin role can edit the application owner. The Select Owner dialog is displayed. Only users who have App Catalog Admin and App Publisher roles are displayed. 16. Click on the radio button to select the user and click OK. App owner information is updated in the Owner info page. 17. Click Add Co-Owner to add new co-owner(s). The Select co-owners dialog is displayed. 18. Search for co-owner by username, first name, last name, or email address and select the checkbox against the co-owner. 19. Click OK to close the Select Co-Owners dialog. 20.Click Save. 21. Click Supported platforms to view the supported platform of the application. 22. Click Save to save the supported platforms information. 23.Click on the Actions icon in the Supported Platforms page to perform one of the following actions: Approve - Send a request to App Catalog Administrator to approve if the platform state is in trial or production requested state. On approving a trial request or a production request, the Application Notification dialog appears. Choose whether to send the application notification to all subscribed users or to not send the notification. Reject - Send a request to App Catalog Administrator to reject if the platform state is in trial or production requested state. On rejecting a trial request or a production request, the Reject Trial Request or Reject Production Request dialog is displayed and a reason must be provided by the App Catalog Administrator. Additional comments (optional) may also be provided. Request Trial - Send a request to App Catalog Administrator to publish the application in Mobile Place App Catalog for trial users to test the app. Set to Trial - For the App Catalog Administrator to publish the application on the Mobile Place App Catalog for only trial users to install and test the app. Request Production - Send a request to App Catalog Administrator to publish the application on the Mobile Place App Catalog to all the end users. Set to Production - Send a request to App Catalog Administrator to publish the application on the Mobile Place App Catalog for all users to access and install the application. On setting it to production, the Application Management C US TO M E R 21
Application Notification dialog appears. Choose whether to send the application notification to all subscribed users or to not send the notification. Retire - For the App Catalog Administrator to retire the application if it is in production. Once an application is retired, it is not available to end users. Users who have installed the app that has been retired can still use the application. Delete - For the App Catalog Administrator to delete an application if it is in "New", "Trial", or "Retired" state. An application in request or production state cannot be deleted. If the application is in new state, the application can be deleted by the publisher as well. Since there is only one platform for the commercial app store application, the application is also deleted. 24.You can also click on the Edit icon in the Supported Platforms page to edit the supported platform. The application workflow state transition for App Catalog Admin role and App Catalog Publisher role is described in the tables below. Table 5: App Catalog Admin Role - Application Workflow State Transition State Can Edit Available Action Items New Trial Requested Trial Production Requested Yes, except info tab and Multimedia tab Yes, except info tab and Multimedia tab Yes, except info tab and Multimedia tab Yes, except info tab and Multimedia tab Set to Trial, Request Trial, Request Production, Set to Production, Delete Approve, Reject Request Production, Set to Production, Delete Approve, Reject Production No Retire Retired No Delete Table 6: App Catalog Publisher Role - Application Workflow State Transition State Can Edit Available Action Items New Yes, except info tab and Multimedia tab Request Trial, Request Production, Delete Trial Requested No None Trial No Request Production Production Requested No None Production No None Retired No None The Edit Platform dialog is displayed. 25. (Optional) Click Documents to add a document that describe more information about your new application. The document must support the following properties: Only doc, pdf, txt, ppt, pptx, and docx file types are allowed. The maximum file size of each document cannot exceed 35 Mb. 22 C U S T O M E R Application Management
26.Click Trial users to add a new trial user who can test the application before it is published to all users. 27. Click Add Trial User. The Select Trial Users dialog is displayed. 28.Search trial users using username, first name, last name, or email address and select the checkbox against the trial user. Only users who have Mobile Place User role is displayed. 29.Click OK to close the Select Trial Users dialog. 30.Click OK to close the Edit Platform dialog. The Supported Platforms page is updated with supported OS version and app version information. 6.5 Adding an Android Application from a Commercial App Store Using SAP HANA Cloud Platform, mobile service for app and device management, an App Catalog Administrator or an App Catalog Publisher can add an Android (including Android for Work) application from a commercial app store to be published on Mobile Place. Context App Catalog Administrators and App Catalog Publishers have the following permissions: Table 7: App Catalog Administrator Role - Permissions State Can Edit Available Action Items New Trial Requested Trial Production Requested Yes, except the Info tab and the Multimedia tab Yes, except the Info tab and the Multimedia tab Yes, except the Info tab and the Multimedia tab Yes, except the Info tab and the Multimedia tab Set to Trial, Request Trial, Request Production, Set to Production, Delete Approve, Reject Request Production, Set to Production, Delete Approve, Reject Production No Retire Retired No Delete Application Management C US TO M E R 23
Table 8: App Catalog Publisher Role - Permissions State Can Edit Available Action Items New Yes, except the Info tab and the Multimedia tab Set to Request Trial, Request Production, Delete Trial Requested No None Trial No Request Production Production Requested No None Production No None Retired No None Procedure 1. Click Applications. 2. From the Manage Apps tab, click New Application. 3. Select Commercial App Store and select Google Play. 4. Click Next. 5. On the Details page: Country select a country. The Country field is disabled on Android devices. Language select a language. The languages that appear depends on the language settings set in the Account Settings Mobile Place page. If you select: Name enter the name of the application. After you save the application, you cannot edit the name of the application. URL copy the URL of the application from the app store. (Optional) Description - If you select: App Store: The information in the description field is automatically populated from the app store. You cannot edit this information. Enterprise: Enter custom description or information for this app. App publisher or app catalog admin can: select only one type of description for the app to be published to the Mobile Place users switch to any type of description at any point of time. Last save description will be published to the Mobile Place users (Optional) Keywords enter keywords separated by commas that will help users in searching and retrieving the new application. Each keyword cannot exceed 60 characters. By default, Accessible to unauthenticated users is disabled. This option is enabled only if unauthenticated access has been enabled from Account Settings Mobile Place page. 24 C U S T O M E R Application Management
If the Accessible to unauthenticated users check box is selected, an application is visible to unauthenticated users only. 6. Click Save. Deploy to managed devices only and Accessible to unauthenticated users are mutually exclusive. The application is created. 7. Click Groups, and select the visibility of the application to all users, or only to selected groups. You can search for an existing group by typing the group name in the search groups window. Use the Actions icon to sort the list based on group name, or apply filters to search for a group. You can also create a new group, if required, by selecting the static or directory group option from the New group drop-down list. The newly created group is selected, by default. For more information on how to create groups, see Group Management section. 8. If you select show the application only to selected groups, you must select the required groups from the list or create a new group. 9. Click Save. 10. Click Multimedia. Upload an application icon or banner image by clicking Browse. A featured application must include a banner image. The banner image must have the following properties: 11. Click Save. Only png, jpeg, and jpg file formats are supported. The recommended resolution is 1024 X 230 pixels. You can upload only one banner image. 12. Click Categories. To select application categories for the application, double-click or drag and drop each category from the Available box to the Selected box. To deselect categories, double-click or drag and drop the category from the Selected box. 13. Click Save. 14. Click Settings and select one or all of the following options: Deploy to managed users only the application is accessible only to managed users. This is the default setting for Android for Work applications. Mark as featured app the application will appear on the banner area in Mobile Place and you will be prompted to provide a banner image if you have not already done so (featured apps require a banner). 15. Click Save. 16. Click Owner info to view the owner information for the application. You can select up to five co-owners for a new application. 17. Click the Edit App Owner icon to change the application owner. Only users with App Catalog Admin role can edit the application owner. Application Management C US TO M E R 25
The Select Owner dialog is displayed. Only users who have App Catalog Admin and App Publisher roles are displayed. 18. Select the user and click OK. The app owner information is updated in the Owner info page. 19. Click Add Co-Owner to add new co-owner(s) (up to five). The Select co-owners dialog is displayed. 20.Search for co-owner by username, first name, last name, or email address. Select co-owners by selecting the checkbox beside their information. 21. Click OK to close the Select Co-Owners dialog. 22. Click Save. 23.Click Supported platforms to view the supported platform information for the application. 24.Click Save to save the supported platforms information. 25. Click the Actions icon in the Supported Platforms page to perform one of the following actions: Approve sends a request to the App Catalog Administrator to approve whether the platform state is in trial or production requested state. On approving a trial request or a production request, the Application Notification dialog appears. Choose whether to send the application notification to all subscribed users or to not send the notification. Reject sends a response to the App Catalog Administrator to reject a trial or production requested state. When a trial request or a production request is rejected, the Reject Trial Request or Reject Production Request dialog is displayed and the App Catalog Administrator must provide a reason for the rejection. Optionally, additional comments may be provided. Request Trial sends a request to the App Catalog Administrator to publish the application in Mobile Place App Catalog for trial users to test the app. Set to Trial sends a request to the App Catalog Administrator to publish the application on the Mobile Place App Catalog for allow trial users (only) to install and test the app. Request Production sends a request to the App Catalog Administrator to publish the application on the Mobile Place App Catalog for all end users. Set to Production sends a request to the App Catalog Administrator to publish the application on the Mobile Place App Catalog for all users to access and install the application. When the application is set to production, the Application Notification dialog appears. Choose whether to send the application notification to all subscribed users or to not send the notification. Retire sends a request for the App Catalog Administrator to retire the application if it is in production. Once an application is retired, it is not available to end users. Users who have installed the app that has been retired can still use the application. Delete Sends a request for the App Catalog Administrator to delete an application if it is in New, Trial, or Retired state. An application in request or production state cannot be deleted. If the application is in New state, the application can be deleted by the publisher as well. Because there is only one platform for the commercial app store application, the application is also deleted. 26.You can also click the Edit icon in the Supported Platforms page to edit the supported platform. The Edit Platform dialog is displayed. 26 C U S T O M E R Application Management