This week for the BYOD Smackdown 2012, I’m profiling Enterproid Divide. The Enterproid approach involves creating a containerized work environment that exists as an application on a users device. Enterproid also just announced a partnership with unified communications provider BroadSoft. Enterproid is about two years old, and Divide was launched in February of 2011.
The Enterproid approach
Enterproid Divide functions as a container application, with security policies and management features applied solely around that application, leaving the rest of the user’s device untouched. Organizations can in turn manage individual applications within the container. The management features are pretty much the same as with any typical MDM solution: password enforcement, encryption, data isolation, clipboard restrictions, remote wipe, timebomb (a passive version of remote wiping), and screen locking, among others.
One interesting feature about Enterproid is that even though corporate management is limited to the Divide container, employees can use the application to manage the entire device. Users can locate and remote-wipe personal devices through a web-portal. This feature isn’t available from the admin console—admins can only wipe and restrict what goes on in the Divide application. So when a user loses their phone, admins can say, “We can’t do anything about it, but you can!” The Divide admin console tracks data also and voice usage, so if an organization is doing a true BYOD program, it can figure out how much usage to reimburse for each employee.
About the apps
All the basic apps—mail client, calendar, contacts, browser, tasks, dialer—are built in. For right now, any other applications added to the work environment have to be deployed through the Divide platform, and no third-party apps purchased from public app stores can be used in the work persona.
Administrators must have access to the package files for applications they want to distribute, but this does allow custom security policies to be wrapped around each app as it’s uploaded and pushed to users. An SDK is also available for companies to integrate apps with Divide.
Divide distributes applications by pushing them from the admin console, using Active Directory roles to determine who gets what. Currently, there's no self-service portal for users to select their own apps.
Divide is distributed by AT&T under the name Toggle, putting a well known name on the product and adding exposure to a 100 million person user-base. Adding Broadsoft as a partner also adds exposure to more potential customers, but even more interesting is that companies could use Broadsoft and Enterproid to provide users a separate work phone number on their personal devices.
Since Enterproid isn’t a mobile device management solution, employees in BYOD situations should find it pretty easy to live with. Another interesting feature of Divide is that it can be used without a corporate backend. Individuals in various other scenarios might find it useful for keeping work and personal data separated on one device, but if someone wants to run a commercial third-party app in the work environment, then they’re out of luck.
This is also a drawback for corporate users. While an app that’s already in a company’s Divide environment is only a helpdesk ticket away, acquiring third-party applications for Divide means that users have to wait for IT to determine if the app is safe, figure out how to get access to the .APK file, upload and secure it, and finally distribute it. This seems a bit "corporate", and in the mean time if the app was something that somebody really needed to do their job, they probably would have already downloaded it to the personal side of their device.
Lack of self-service third-party apps aside, Divide does what its name implies: keeps the corporate data safe on personal devices. Users get to do what ever they want with their personal space, Android fragmentation issues aren't a problem, and IT has a trusted app to interface with. These attributes comprise a fairly open model of BYOD.
This feature overview will be updated from time to time. If you notice any inaccuracies, please comment or email me at firstname.lastname@example.org. There are a lot of vendors and features to keep track of, and I want to be sure and keep everything straight.
- Platform Android
- Architecture containerized application
- Security around work persona application
- App sources Enterproid provides basic apps, they offer APIs to develop your own apps
- How external apps are brought in uploaded by admin, policy assigned, must have .apk
- App store no, apps push automatically
- Split plans/phone numbers records data usage of work app, split phone numbers through UC partner
- Management interface web-based
- On-site requirements none
- Provisioning download from Android market
- MDM capabilities can control work persona app when it’s running; user can manage the entire device through their own interface