Configuring Data Leakage Prevention (DLP) with BlackBerry SDK

Apps Fused with the BlackBerry EMM SDK adhere to the BlackBerry Dynamics BlackBerry Data Leakage Prevention (DLP) settings configured in BlackBerry UEM or Good Control.  DLP settings found in a BlackBerry Dynamics profile control copy/paste and open-in/with capabilities of Fused apps. BlackBerry DLP must also be turned on to enable app lockdown features available with BoostEMM™ by Appdome including:

• Connect Secure Browser: Lockdown web links in app open to only open in BlackBerry Access Secure Browser
• Connect Secure Email: Lockdown email links in the app to only open in BlackBerry Work Secure Email
• Secure Document Sharing: Lockdown documents that can be shared from the app to BlackBerry Work Secure Email

This article shows you how to enable the DLP settings in BlackBerry UEM/Good Control and enable BoostEMM capabilities on Appdome. 

Enable DLP settings in the BlackBerry UEM Console

DLP settings are used to control copy and paste to and from native or Fused BlackBerry dynamics apps, as well as control open-in or open-with apps. DLP settings are also required to enable the Appdome BoostEMM features: Connect Secure Browser, Connect Secure Email, and Secure Document Sharing. 

1. Login to BlackBerry and click Policies and Profiles
2. Expand BlackBerry Dynamics
3. Select the BlackBerry Dynamics profile assigned to the user group, user, or Fused app
4. Check the box next to [x] "Do not allow copying data from BlackBerry Dynamics apps into non-BlackBerry Dynamic apps."
5. Optionally check the box next to [x] "Do not allow copying data from non-BlackBerry Dynamics apps into BlackBerry Dynamic apps."
   
   
   

Enable DLP settings in the BlackBerry Good Control

DLP settings are used to control copy and paste to and from native or Fused BlackBerry dynamics apps, as well as control open-in or open-with apps. DLP settings are also required to enable the Appdome BoostEMM features: Connect Secure Browser, Connect Secure Email, and Secure Document Sharing. 

1. Login to BlackBerry Good Control and click Policy Sets
2. Expand the Policy you will assign to the Fused app
3. Select the BlackBerry Dynamics policy assigned to the user group, user, or Fused app
4. Expand Security Policies 
5. Under Data Leakage Prevention Check the box next to [x] "Prevent copy from GD apps into non-GD apps."
6. Optionally check the box next to: BoostEMM™ by Appdome"

Force Web Links to open-in BlackBerry Access
(Connect Secure Browser)

To force all web links in an app to open in BlackBerry Access, on Appdome you can Fuse an app with the BlackBerry EMM SDK and the Connect Secure Browser option as shown here available under BoostEMM by Appdome.

For iOS, no configuration in BlackBerry UEM/Good Control is required.  If you are using Android, then you will need to modify BlackBerry Access app settings in UEM/Good Control.

To modify BlackBerry Access app policy settings:

1. Log in to your BlackBerry environment and select the Apps tab
2. Select BlackBerry Access
3. Click the App Configuration Policy
   
   
   
   
4. Make sure to have the checkbox next to "Allow external apps to open HTTP/HTTPS URLs through BlackBerry Access" turned on:
   
   
   
   

Force Email Links to Open-in BlackBerry Work Secure Email
(Connect Secure Email)

To make all email links open in BlackBerry Work, on Appdome you can Fuse an app with the BlackBerry EMM SDK and the Connect Secure Email option as shown here under BoostEMM by Appdome.

1. Edit the app configuration for BlackBerry Work.  
2. Log in to your BlackBerry environment and select the Apps tab
3. Select BlackBerry Work
4. Click the App Configuration Policies
   
   
   
   
5. Click on Interoperability tab
6. Under Allow 3rd Party App to Send Mail make sure have the checkbox next to Enable sending mail from BlackBerry Work via mailto:gmmmailto:/gwmailto:
   
   
   
   
7. Click Save
   
   
     

Prohibit document sharing to non-BlackBerry Dynamics apps

To prohibit opening docs in non-BlackBerry dynamics apps and permit apps to be sent to BlackBerry work, on Appdome you can Fuse an app with the BlackBerry EMM SDK, Connect Secure Email, and Prohibit Document Sharing as shown below:



- This is available under BoostEMM by Appdome.  

In your BlackBerry environment you will need to configure this:  

1. Edit the app configuration for BlackBerry Work.  
2. Log in to your BlackBerry environment and select the Apps tab
3. Select BlackBerry Work
4. Click the App Configuration Policy
   
   
   
   
5. Select the Interoperability tab
6. Under File Transfer Privileges make sure there is a checkbox next to "Enable exporting to 3rd-party native apps" and have a checkbox next to "Enable Importing from 3rd-party native apps." 
   
   

Thanks for visiting the Appdome knowledge base!  We hope Appdome is living up to our mission of simplifying your mobile integrations.  If you don't already have an account, you can sign up for free.  Happy fusing!

For more information on Appdome for BlackBerry Dynamics please visit this resource.