Layer7 API Security

 View Only

Meet the New Standard in Mobile

By Bill Oakes posted Dec 13, 2018 04:02 PM

  

Announcing Mobile API Gateway 4.2 and Mobile SDK 1.9

 

Broadcom’s acquisition of CA and the integration of our Security and API Management business units under the Enterprise Software Division help us further our commitment to meeting the needs of a mobile-first world, and our latest release of Mobile API Gateway underscores this.

 

We believe that mobile success is now measured on new standards: 

  • Ease of use
  • Seamless authentication
  • Secure connectivity
  • Powerful performance 

Let’s look at how Mobile API Gateway 4.2 and Mobile SDK 1.9 address each of these standards of mobile success.

 

Ease of Use

In Mobile SDK 1.7, we added support for Xamarin for iOS and Android app development, and client authentication using a JWT (JSON Web Token). In Mobile SDK 1.9, customers can now use Xamarin and JWT natively. This gives developers the flexibility to build on their preferred platforms, and deploy apps using secure authentication methods.

 

Previously, the Mobile API Gateway allowed clients to manage which devices could access applications and data. Mobile API Gateway 4.2 improves self-service and out of the box experience by letting clients add and remove devices using nicknames (device metadata).

 

Seamless Authentication

For mobile users, passwords are easily forgotten, lengthy, and an impediment to a seamless user experience. Authentication methods like biometrics were created so users can quickly log into a device or app. But when switching between devices, users are again slowed by additional authentication requirements. Proximity Login is the answer and is now supported in Mobile API Gateway 4.2.

 

Proximity Login allows a user to log into an app on one device, and then use that device to log into the same or additional applications on another device.

 

Take a mobile banking scenario. You log into your banking app with your username and password. Then, in the branch location, you visit a terminal and attempt to log into the browser. Rather than re-entering your username and password, the browser provides a QR code that you scan with your mobile phone. Now you are authenticated on both the app and the browser.  Click on this link to see an example of Proximity Login in action.

 

Our Mobile API Gateway integrates with FIDO, enabling a triangle of trust between users, apps, and devices that results in secure and seamless authentication. With Mobile SDK 1.9, we now support Single Sign-On (SSO) between apps and widgets to make this user experience even more seamless. 

 

Back to our banking example, with SSO between apps and widgets, banks can quickly display non-private info without opening the app. For example, last balance, news, or alerts that the user can access with a swipe from the home screen.

 

Secure Connectivity

Mobile API Gateway 4.2 makes the management of MQTT connections simpler. MQTT protocols provide a way to aggregate information from many sources, combine data, and deliver it to multiple platforms as needed. MQTT is especially common in IoT scenarios.

 

Our customers are already deploying MQTT connections to create powerful end-user experiences. For example, Eurosport developed a new, interactive cycling experience built on mobile apps and connectivity. With this release, we have extended our MQTT support to include secure connectivity and protocol translation, allowing you to develop and power connected digital experiences at scale.

 

Powerful Performance 

Finally, Mobile API Gateway 4.2 and Mobile SDK 1.9 include performance improvements to ensure app functionality and reduce latency. 60% of mobile users delete an app or abandon a website after one attempt if there was a performance problem. The app experience is everything.

 

We continue to refine our Mobile API Gateway and Mobile SDK to ensure you can deliver five-star apps to your customers.   For more information, click on the following link to learn more about Mobile API Gateway.

0 comments
5 views