blackberry enterprise software · blackberry enterprise mobility suites combine blackberry uem and...

BlackBerry Enterprise SoftwareEnterprise Product Guide

December 2018

2018-11-30Z

| | 2

Contents

BlackBerry enterprise products......................................................................... 5

The BlackBerry Infrastructure........................................................................... 6

BlackBerry UEM................................................................................................ 7Architecture: BlackBerry UEM............................................................................................................................... 7BlackBerry UEM components................................................................................................................................9

BlackBerry UEM Cloud.................................................................................... 12Architecture: BlackBerry UEM Cloud.................................................................................................................. 12

BlackBerry Enterprise Mobility Suites............................................................. 15BlackBerry Enterprise Mobility Suite components............................................................................................ 16

Additional enterprise server products............................................................. 19BlackBerry 2FA..................................................................................................................................................... 20

Architecture: BlackBerry 2FA................................................................................................................... 20BlackBerry Enterprise Identity............................................................................................................................. 22

Architecture: BlackBerry Enterprise Identity........................................................................................... 23BlackBerry Workspaces....................................................................................................................................... 24BlackBerry Analytics.............................................................................................................................................24SecuSUITE for Enterprise.................................................................................................................................... 25BlackBerry AtHoc..................................................................................................................................................25BlackBerry UEM Notifications............................................................................................................................. 26

Enterprise apps............................................................................................... 27BlackBerry UEM Client......................................................................................................................................... 28BlackBerry Dynamics apps..................................................................................................................................28BBM Enterprise.....................................................................................................................................................29BlackBerry Enterprise BRIDGE.............................................................................................................................29

Enterprise SDKs.............................................................................................. 31BlackBerry UEM Integration SDK........................................................................................................................ 31BlackBerry Dynamics SDK................................................................................................................................... 32Spark Communications Services SDK................................................................................................................32BlackBerry Web Services..................................................................................................................................... 33

Architecture: BlackBerry Web Services and BlackBerry UEM................................................................33

| | iii

Glossary.......................................................................................................... 35

Legal notice.................................................................................................... 37

| | iv

BlackBerry enterprise productsThe BlackBerry enterprise software platform offers more than the best-in-class unified endpoint managementprovided by BlackBerry UEM.

BlackBerry UEM is integrated with BlackBerry Dynamics to provide a secure mobile app platform that you canmanage from a single interface.

BlackBerry Enterprise Mobility Suites combine BlackBerry UEM and more EMM services to mobilize content,deploy leading business apps, deliver enhanced collaboration, protect your enterprise content everywhere it goes,and ensure document security and compliance.

This document shows how BlackBerry enterprise products work together to help you securely mobilize yourpeople, processes, apps, and information.

| BlackBerry enterprise products | 5

The BlackBerry InfrastructureAt the heart of BlackBerry is the BlackBerry Infrastructure. The BlackBerry Infrastructure is a global private datanetwork distributed across multiple regions that enables and secures data in transit between thousands oforganizations and millions of users around the world. It is designed to efficiently manage the transport of databetween BlackBerry services and end-user devices.

The BlackBerry Infrastructure is the essential, highly secure hub for many BlackBerry products and services,including:

• BlackBerry UEM• BBM• BlackBerry 2FA• BlackBerry Enterprise Identity• SecuSUITE for Enterprise

For organizations using BlackBerry UEM, the BlackBerry Infrastructure provides a trusted path between theorganization and every user based on strong, cryptographic, mutual authentication. Because of the end-to-endencryption that protects data transmitted between the device and BlackBerry UEM, organizations can be surethat data sent to and from devices is safe and secure. BlackBerry UEM maintains a constant connection tothe BlackBerry Infrastructure, meaning that organizations require only a single outbound connection to a trustedIP address to send data to users.

| The BlackBerry Infrastructure | 6

BlackBerry UEMBlackBerry UEM is a multiplatform EMM solution from BlackBerry that provides comprehensivedevice, app, and content management with integrated security and connectivity, and helps youmanage iOS, macOS, Android, Windows 10, and BlackBerry 10 devices for your organization.

BlackBerry UEM offers trusted end-to-end security and provides the control that organizations need to manage allendpoints and ownership models.

Key benefits of BlackBerry UEM include the following features:

Feature Benefit

Low total cost of ownership BlackBerry UEM reduces complexity, optimizes pooled resources,ensures maximum uptime and helps you achieve the lowest totalcost of ownership.

Single web-based interface Manage iOS, macOS, Android, Windows 10, and BlackBerry10 devices all from a single management console.

Flexible ownership models Use a set of customizable policies and profiles to manage BYOD,COPE, and COBO devices, and protect business information.

User and device reporting Manage fleets of devices using comprehensive reporting anddashboards, dynamic filters, and search capabilities.

Simple user set up and enrollment Allow users to activate their own devices with BlackBerry UEM Self-Service.

Industry-leading mobile security BlackBerry UEM leverages the BlackBerry Infrastructure to ensuredata security across all devices.

High availability Configure high availability to minimize service interruptions fordevice users.

For more information about BlackBerry UEM, see the BlackBerry UEM content.

Architecture: BlackBerry UEMFor more information about the BlackBerry UEM architecture, see the BlackBerry UEM Architecture content.

| BlackBerry UEM | 7

https://docs.blackberry.com/en/endpoint-management/blackberry-uem/

https://docs.blackberry.com/en/endpoint-management/blackberry-uem/current/architecture

Component Description

BlackBerry UEM BlackBerry UEM is a unified endpoint management solution that providescomprehensive multiplatform device, application, and content management withintegrated security and connectivity.

BlackBerry Infrastructure The BlackBerry Infrastructure registers user information for device activation andvalidates licensing information. All the data that travels between the BlackBerryInfrastructure and BlackBerry UEM is authenticated and encrypted to provide asecure communication channel into your organization for devices outside thefirewall.

BlackBerryDynamics NOC

The BlackBerry Dynamics NOC is a network operations center that provides securecommunications between BlackBerry Dynamics apps on devices and BlackBerryControl, BlackBerry Proxy and BlackBerry Enterprise Mobility Server.

Devices BlackBerry UEM supports iOS, macOS, Android, Windows, BlackBerry 10,and BlackBerry OS (version 5.0 to 7.1) devices.

Third-party applicationand content servers

BlackBerry UEM connects to content and application servers in your organization'senvironment, including the company directory, mail server, certification authorities,and so on.

BEMS and BlackBerry plug-ins

BlackBerry UEM works with additional BlackBerry enterprise products suchas BlackBerry Enterprise Identity, BlackBerry 2FA, and BlackBerry Workspaces, toallow you to extend the endpoint management capabilities in your organization.

The BlackBerry Enterprise Mobility Server provides several services used to sendwork data to and from BlackBerry Dynamics apps.


BlackBerry UEM componentsThis diagram shows the BlackBerry UEM components that are used to manage iOS, macOS, Android, Windows,and BlackBerry 10 devices. For information about the components that manage BlackBerry OS (version 5.0 to 7.1)devices, see the BlackBerry UEM Architecture content.

Component name Description

BlackBerry UEM Core The BlackBerry UEM Core is the central component of the BlackBerryUEM architecture. It consists of several subcomponents that are responsible for:

• Logging, monitoring, reporting, and management functions• Authentication and authorization services• Scheduling and sending commands, IT policies, and profiles to devices• Sending user, policy, and other configuration data to BlackBerry Dynamics apps

BlackBerryUEM database

The BlackBerry UEM database is a relational database that contains user accountinformation and configuration information that BlackBerry UEM uses to managedevices and BlackBerry Dynamics apps.


https://docs.blackberry.com/en/endpoint-management/blackberry-uem/current/architecture/car1399570575293


BlackBerry MDSConnection Service

The BlackBerry MDS Connection Service provides a secure connectionbetween BlackBerry 10 devices and your organization's resources when the deviceis not connected to your work Wi-Fi network or using a VPN connection.

BlackBerry Dispatcher The BlackBerry Dispatcher provides secure connectivity using IPPP for BlackBerry10 devices.

BlackBerry AffinityManager

The BlackBerry Affinity Manager is responsible for maintaining an active SRPconnection between BlackBerry 10 devices and the BlackBerry Infrastructure whenthe devices are not using BlackBerry Secure Connect Plus.

BlackBerry Proxy BlackBerry Proxy maintains the secure connection between your organizationand the BlackBerry Dynamics NOC. It also supports BlackBerry Dynamics DirectConnect, which allows app data to bypass the BlackBerry Dynamics NOC.

BlackBerry SecureConnect Plus

BlackBerry Secure Connect Plus provides a secure IP tunnel between work appson devices and your organization's network. One tunnel is established for eachdevice through the BlackBerry Infrastructure.

BlackBerry SecureGateway

The BlackBerry Secure Gateway provides a secure connection throughthe BlackBerry Infrastructure and BlackBerry UEM to your organization's mailserver for iOS devices.

BlackBerry GatekeepingService

The BlackBerry Gatekeeping Service sends commands to Exchange ActiveSync toadd devices to an allowed list when devices are activated on BlackBerry UEM.Unmanaged devices that try to connect to an organization's mail server can bereviewed, verified, and blocked or allowed by an administrator using the BlackBerryUEM management console.

Management consoleand BlackBerry UEM Self-Service

The management console and BlackBerry UEM Self-Service provide a web-baseduser interface for administrator and user access to BlackBerry UEM.

Administrators use the management console to manage system settings, users,devices, and apps.

Users use BlackBerry UEM Self-Service to set an activation password and sendcommands to devices, such as set password, lock device, and delete device data.

BlackBerry EnterpriseMobility Server

BEMS consolidates several services used to send work data toand from BlackBerry Dynamics apps, including: BlackBerry PushNotifications, BlackBerry Connect, BlackBerry Presence, and BlackBerry Docs.

BlackBerryEnterprise MobilityServer databases

The BEMS databases store user, app, policy, and configuration information.

BlackBerry PushNotifications

BlackBerry Push Notifications accepts registration requestsfrom iOS and Android devices and then communicates with Microsoft Exchange tomonitor users' work mail accounts for changes.



BlackBerry Connect BlackBerry Connect provides secure instant messaging, company directory lookup,and user presence information to iOS and Android devices.

BlackBerry Presence BlackBerry Presence provides real-time presence status to BlackBerryDynamics apps.

BlackBerry Docs BlackBerry Docs lets your BlackBerry Dynamics app users access, synchronize,and share documents using their work file server, Microsoft SharePoint, Box,and content management systems that support CMIS, without the need for VPNsoftware, firewall reconfiguration, or duplicate data stores.

BlackBerry Router andproxy servers

By default, BlackBerry UEM makes a direct connection to the BlackBerryInfrastructure over ports 3101 and 443. If your organization's security policyrequires that internal systems cannot make connections directly to the Internet,you can install the BlackBerry Router or use a third-party TCP proxy server thatsupports SOCKs v5 with no authentication.

The BlackBerry UEM Core and BlackBerry Proxy support using a third-party HTTPproxy server to connect to the BlackBerry Dynamics NOC.

BlackBerryInfrastructure and BlackBerryDynamics NOC

The BlackBerry Infrastructure registers user information for device activation,validates licensing information for BlackBerry UEM and provides a trusted pathbetween the organization and every user based on strong, cryptographic, mutualauthentication.

The BlackBerry Dynamics NOC is a separately-located network operations centerthat provides secure communications between BlackBerry Dynamics apps ondevices and BlackBerry UEM, and the BlackBerry Enterprise Mobility Server.


BlackBerry UEM CloudBlackBerry UEM Cloud is an EMM solution from BlackBerry that helps you manage iOS, macOS, Android, Windows10, and BlackBerry 10 devices for your organization. An easy-to-use, low-cost, and securesolution, BlackBerry hosts BlackBerry UEM Cloud over the Internet. You only need a supported web browser toaccess the service.

BlackBerry UEM Cloud offers trusted end-to-end security and support for a wide range of devices and provides thecontrol that organizations need to manage all endpoints and ownership models.

Key benefits of BlackBerry UEM Cloud include the following features:

Feature Benefit

Low total cost of ownership BlackBerry UEM Cloud removes the need to install, manage, andupdate servers.

Speed of deployment BlackBerry UEM Cloud uses a web-based browser interface thatdoesn't require any server installation. You can go from purchaseto service availability in minutes.

Single web-based interface Manage iOS, macOS, Android, Windows 10, and BlackBerry10 devices all from a single management console.

Flexible ownership models Use a set of customizable policies and profiles to manage BYOD,COPE, and COBO devices, and protect business information.

User and device reporting Manage fleets of devices using comprehensive reporting anddashboards, dynamic filters, and search capabilities.

Simple user set up and enrollment Allow users to activate their own devices with BlackBerry UEM Self-Service.

Industry-leading mobile security BlackBerry UEM Cloud leverages the BlackBerry Infrastructure toensure data security across all devices.

For more information about BlackBerry UEM Cloud, see the BlackBerry UEM Cloud content.

Architecture: BlackBerry UEM CloudFor more information about the BlackBerry UEM Cloud architecture, see the BlackBerry UEM Cloud Architecturecontent.

| BlackBerry UEM Cloud | 12

https://docs.blackberry.com/en/endpoint-management/blackberry-uem-cloud/latest

https://docs.blackberry.com/en/endpoint-management/blackberry-uem-cloud/latest/architecture

https://docs.blackberry.com/en/endpoint-management/blackberry-uem-cloud/latest/architecture


BlackBerry UEM Cloud BlackBerry UEM Cloud is a service that allows you to manage devices used in yourorganization's environment.

BlackBerryInfrastructure and BlackBerryDynamics NOC

The BlackBerry Infrastructure registers user information for device activation andvalidates licensing information. If you enable BlackBerry Secure Connect Plus orthe BlackBerry Secure Gateway, data in transit that uses these services passesthough the BlackBerry Infrastructure.

The BlackBerry Dynamics NOC is a separately-located NOC that provides securecommunications between BlackBerry Dynamics apps on devices and BlackBerryProxy.

Devices BlackBerry UEM Cloud supports iOS, macOS, Android, Windows, and BlackBerry10 devices.



BlackBerry ConnectivityNode

The BlackBerry Connectivity Node is an optional component that you install insideyour organization's firewall. It includes five components that add functionalityto BlackBerry UEM Cloud:

• The BlackBerry Cloud Connector connects BlackBerry UEM Cloud to yourcompany directory behind the firewall to allow basic attribute synchronization,search functionality, and user authentication services.

• BlackBerry Proxy maintains a secure connection between your organizationand the BlackBerry Dynamics NOC, which allows BlackBerry Dynamics apps tocommunicate securely with your organization's resources behind the firewall.

• The BlackBerry Gatekeeping Service sends commands to ExchangeActiveSync to add devices to an allowed list when devices are activatedon BlackBerry UEM Cloud.

• BlackBerry Secure Connect Plus provides a secure IP tunnel between workapps on devices and your organization's network.

• The BlackBerry Secure Gateway provides a secure connection throughthe BlackBerry Infrastructure and BlackBerry UEM Cloud to your organization'smail server for iOS devices.


If you have installed the BlackBerry Connectivity Node, you can also install an on-premises BEMS. BEMS consolidates several services used to send work data toand from BlackBerry Dynamics apps:

• BlackBerry Connect provides secure instant messaging, company directorylook-up, and user presence information to iOS and Android devices.

• BlackBerry Presence provides real-time presence status to BlackBerryDynamics apps.

• BlackBerry Docs lets your BlackBerry Dynamics app users access,synchronize, and share documents without the need for VPN software, firewallreconfiguration, or duplicate data stores.



Company directory BlackBerry UEM Cloud supports connectivity with your organization's MicrosoftActive Directory or LDAP company directory using the BlackBerry ConnectivityNode.

Microsoft Azure ActiveDirectory

Microsoft Azure Active Directory is a cloud-based directory management service.If your organization uses Azure Active Directory you can connect to it instead of, orin addition to, a company directory behind the firewall.

BlackBerry plug-insand BEMS

The cloud version of BlackBerry Enterprise Mobility Server provides BlackBerryPush Notifications, which accepts push registration requestsfrom iOS and Android devices and then communicates with Microsoft Exchange tomonitor the user's work mail account for changes.

BlackBerry UEM Cloud works with additional BlackBerry enterprise products suchas BlackBerry Enterprise Identity, BlackBerry 2FA, and BlackBerry Workspaces toallow you to extend UEM capabilities in your organization.


BlackBerry Enterprise Mobility SuitesBlackBerry Enterprise Mobility Suites include BlackBerry UEM, BlackBerry Dynamics, and additional services underone license to offer a comprehensive unified endpoint management solution that provides mobile collaborationand a trusted end-to-end approach to security.

Suite Features

BlackBerry EnterpriseMobility Suite -Management Edition

• Cross-platform support for iOS, macOS, Android (including SamsungKNOX), Windows 10, and BlackBerry 10 devices

• BlackBerry UEM with support for Work and personal - Corporate activationsfor BlackBerry 10 devices, MDM controls, and User privacy activations for mostdevice types, and Work space only activations for Android devices

• BlackBerry Dynamics with support for MDM, MAM, and BlackBerry Access• Cloud and on-premises deployment options

BlackBerry EnterpriseMobility Suite - EnterpriseEdition

• All BlackBerry Enterprise Mobility Suite - Management Edition features• BlackBerry Work

BlackBerry EnterpriseMobility Suite -Collaboration Edition

• All BlackBerry Enterprise Mobility Suite - Enterprise Edition features• Advanced BlackBerry UEM security and connectivity features for

managing iOS, Android (including Samsung KNOX Workspace), and BlackBerry10 devices

• Secure instant messaging using BlackBerry Connect• Secure access to work content using BlackBerry Secure Connect

Plus and BlackBerry Docs• Unlimited deployment of BlackBerry Dynamics secured apps from third-party

software vendors• Complete cloud service federation and single sign-on solution using BlackBerry

Enterprise Identity• Two-factor authentication enabled through users' devices for authentication

to BlackBerry apps and Microsoft Office 365 with BlackBerry 2FA

BlackBerry EnterpriseMobility Suite -Application Edition

• All BlackBerry Enterprise Mobility Suite - Collaboration Edition features• Unlimited deployment of customer-developed BlackBerry Dynamics secured

apps• Custom shared services app integration• Full two-factor authentication enabled through users' devices with BlackBerry

2FA• Data gathering and usage metrics from BlackBerry Dynamics apps on your

users' devices using BlackBerry Analytics

BlackBerry EnterpriseMobility Suite - ContentEdition

• All BlackBerry Enterprise Mobility Suite - Application Edition features• Enterprise file synchronization and sharing, access control, and document

rights management with BlackBerry Workspaces

| BlackBerry Enterprise Mobility Suites | 15

BlackBerry Enterprise Mobility Suite componentsThis diagram shows how the products and services included with BlackBerry Enterprise Mobility Suites worktogether with BlackBerry UEM.


BlackBerry UEM Core The BlackBerry UEM Core is the central component of the BlackBerryUEM architecture.



BlackBerry 2FA module BlackBerry 2FA provides two-factor authentication to your organization'sresources.

The BlackBerry 2FA module is a component of the BlackBerry UEM Core thatreceives authentication requests from the BlackBerry 2FA server or BlackBerryEnterprise Identity and sends requests to users' device.

BlackBerry 2FA is included with the BlackBerry Enterprise Mobility Suite -Collaboration Edition for user authentication only with Microsoft Office 365 andwith BlackBerry enterprise products.

BlackBerry 2FA is included with BlackBerry Enterprise Mobility Suite - ApplicationEdition, and BlackBerry Enterprise Mobility Suite - Content Edition for all supporteduses.

BlackBerry EnterpriseIdentity plug-infor BlackBerry UEM

BlackBerry Enterprise Identity provides a single sign-on solution to users andunified management for administrators across a number of cloud and SaaSservices. The BlackBerry Enterprise Identity plug-in for BlackBerry UEM allowsadministrators to manage Enterprise Identity from the BlackBerry UEM console.

BlackBerry Enterprise Identity is included with the BlackBerry Enterprise MobilitySuite - Collaboration Edition, BlackBerry Enterprise Mobility Suite - ApplicationEdition, and BlackBerry Enterprise Mobility Suite - Content Edition.

BlackBerryWorkspaces plug-infor BlackBerry UEM

The BlackBerry Workspaces plug-in for BlackBerryUEM integrates Workspaces management into the BlackBerry UEM managementconsole.

The BlackBerry Workspaces plug-in for BlackBerry UEM is part of BlackBerryWorkspaces and is included with the BlackBerry Enterprise Mobility Suite - ContentEdition.

BlackBerryUEM database

The BlackBerry UEM database is a relational database that contains user accountinformation and configuration information that BlackBerry UEM uses to managedevices and BlackBerry Dynamics apps.

BlackBerry Proxy BlackBerry Proxy maintains the secure connection between your organization andthe BlackBerry Dynamics NOC.

Management consoleand BlackBerry UEM Self-Service

The management console and BlackBerry UEM Self-Service is a web-basedconsole that provides administrator and user access to BlackBerry UEM and otherintegrated BlackBerry enterprise products.


BEMS consolidates several services used to send work data to andfrom BlackBerry Dynamics apps, including: BlackBerry Mail, BlackBerryConnect, BlackBerry Presence, and BlackBerry Docs.





BlackBerry PushNotifications

BlackBerry Push Notifications accepts registration requestsfrom iOS and Android devices and then communicates with Microsoft Exchange tomonitor users' work mail accounts for changes.

BlackBerry Connect BlackBerry Connect provides secure instant messaging, company directory lookup,and user presence information to iOS and Android devices.

BlackBerry Presence BlackBerry Presence provides real-time presence status to third-party BlackBerryDynamics apps.

BlackBerry Docs BlackBerry Docs lets your BlackBerry Dynamics app users access, synchronize,and share documents using their work file server, SharePoint, Box, and contentmanagement systems supporting CMIS, without the need for VPN software,firewall reconfiguration, or duplicate data stores.

BlackBerry 2FA server BlackBerry 2FA provides two-factor authentication to your organization'sresources.

The BlackBerry 2FA server communicates with your work VPN and the BlackBerry2FA service in BlackBerry UEM to send the request for the second factor to auser's devices.

The BlackBerry 2FA server is part of BlackBerry 2FA and is included withthe BlackBerry Enterprise Mobility Suite - Application Edition and BlackBerryEnterprise Mobility Suite - Content Edition.

BlackBerryWorkspaces servers

BlackBerry Workspaces is a secure file management platform that allows usersto securely access, synchronize, edit, and share files and folders using a Webbrowser or apps on Windows or macOS tablets and computers or on iOS, Android,and BlackBerry 10 devices.

The BlackBerry Workspaces servers are part of BlackBerry Workspaces, which isincluded with the BlackBerry Enterprise Mobility Suite - Content Edition.

For more information on components within BlackBerry UEM, see the BlackBerry UEM Architecture content.


https://docs.blackberry.com/en/endpoint-management/blackberry-uem/current/architecture

Additional enterprise server productsBlackBerry offers several products that your organization can use to add features and functionality to BlackBerryUEM.

Some enterprise products require you to have a BlackBerry UEM installation or BlackBerry UEM Cloud. Theseproducts work with BlackBerry UEM to provide additional capabilities to your organization, such as identitymanagement and device capabilities.

Some products can be implemented independently from BlackBerry UEM. Many of the products that workindependently can also be integrated with BlackBerry UEM, either on their own or as part of one of the BlackBerryEnterprise Mobility Suites.


BlackBerry UEM BlackBerry UEM is a unified endpoint management service that allows you to managedevices used in your organization's environment.

BlackBerry UEMCloud

BlackBerry UEM Cloud provides most of the unified endpoint management features of theon-premises version of BlackBerry UEM in a cloud environment.

BlackBerry 2FA BlackBerry 2FA provides your users with two-factor authentication to your organization’sresources. Target systems can include VPNs, network gateways, and, when it is deployedwith BlackBerry Enterprise Identity, cloud services.

BlackBerryEnterpriseIdentity

BlackBerry Enterprise Identity provides single sign-on to cloud services, suchas Workspaces, Box, WebEx, and Salesforce, for your users.

| Additional enterprise server products | 19


BlackBerryWorkspaces

BlackBerry Workspaces is an enterprise file synchronization and sharingsolution that allows users to share, edit, and control their files on every device,including Windows or macOS computers and iOS, Android, and BlackBerry 10 devices.

BlackBerryAnalytics

BlackBerry Analytics is a web-based tool that you can use to view information aboutdevices and BlackBerry Dynamics apps in your organization's environment.

SecuSUITE forEnterprise

SecuSUITE for Enterprise is a software-based solution hosted in the BlackBerryInfrastructure that provides secure calling and text messaging on mobile devices,safeguarding your organization’s sensitive conversations against electroniceavesdropping.

BlackBerryAtHoc

BlackBerry AtHoc Networked Crisis Communication is a comprehensive emergency massnotification system used by military, government, and commercial organizations to providephysical security, force protection, and personnel accountability for their workforce. Itempowers organizations to communicate internally and externally with their people andpartnered organizations, anytime, anywhere, across multiple devices.

If you have both BlackBerry AtHoc and BlackBerry UEM, you can use BlackBerry UEMNotifications to message users via SMS, phone, and email directly from the UEM console.

BlackBerry 2FABlackBerry 2FA provides users with two-factor authentication to your organization’s resources. It allows you touse your users iOS, Android, BlackBerry 10, or BlackBerry OS (version 6.0 to 7.1) devices as the second factorof authentication when users connect to your organization’s resources. BlackBerry 2FA prompts users forconfirmation on their device when they attempt to access one of your resources.

For users who don't have a mobile device or have a mobile device that doesn't have sufficient connectivity tosupport the real-time BlackBerry 2FA, you can issue standards-based one-time password (OTP) tokens. The firstauthentication factor is the user's directory password, and the second authentication factor is a dynamic codethat appears on the token's screen.

You manage BlackBerry 2FA from the BlackBerry UEM or BlackBerry UEM Cloud management console. Youcan also install a BlackBerry 2FA server in your network. The BlackBerry 2FA server allows you to leverageservices such as a VPN gateway or REST endpoint to provide users with access to those resources. BlackBerry2FA is integrated with BlackBerry Enterprise Identity. If you do not install the BlackBerry 2FA server, you canuse BlackBerry 2FA to provide a second factor of authentication for the resources that you manage access towith Enterprise Identity.

BlackBerry 2FA can be purchased separately or licensed with the BlackBerry Enterprise Mobility Suite - ApplicationEdition or BlackBerry Enterprise Mobility Suite - Content Edition.

Two-factor authentication enabled through users' devices for authentication to BlackBerry apps and MicrosoftOffice 365 only is available with the BlackBerry Enterprise Mobility Suite - Collaboration Edition.

For more information about BlackBerry 2FA, see the BlackBerry 2FA content.

Architecture: BlackBerry 2FA


https://docs.blackberry.com/en/id-comm-collab/blackberry-2fa


User's computer ordevice

The user's computer or device is any device that the user wants to connect to aresource that requires two-factor authentication.

BlackBerry 2FA server(optional)

The BlackBerry 2FA server connects to the BlackBerry 2FA module in BlackBerryUEM to find the devices associated with a user and to send authenticationrequests to the BlackBerry 2FA app that's installed on the devices. The BlackBerry2FA server is supported only with on-premise installations of BlackBerry UEM.

VPN gateway (optional) The VPN gateway is a computer that accepts VPN connections to yourorganization's network. The VPN gateway requires the BlackBerry 2FA server.

REST API (optional) The REST API is a customer-defined, on-premises service that authenticatesusers who access it through the BlackBerry 2FA server's REST API client. The VPNgateway requires the BlackBerry 2FA server.

BlackBerry EnterpriseIdentity (optional)

BlackBerry Enterprise Identity provides users with single sign-on to cloud services,such as Workspaces, Box, Cisco WebEx, and Salesforce. Enterprise Identity canconnect directly to the BlackBerry 2FA service in BlackBerry UEM.

BlackBerry 2FA modulewithin BlackBerry UEM

The BlackBerry 2FA module within BlackBerry UEM provides the connection to thedevices that are used as the second factor for authentication. The devices can bemanaged by BlackBerry UEM or activated with BlackBerry UEM only for BlackBerry2FA.



User's devicewith BlackBerry 2FA oran OTP token

For iOS and Android devices, BlackBerry 2FA is included with the BlackBerry UEMClient.

For BlackBerry 10 and BlackBerry OS (version 6 to 7.1) devices, users must installthe BlackBerry 2FA app.

Users who don't have a supported mobile device can use a one-time password(OTP) token.

BlackBerry Enterprise IdentityBlackBerry Enterprise Identity provides single sign-on (SSO) to cloud services such as Microsoft Office 365, GSuite, BlackBerry Workspaces, and many others. With single sign-on, users don't have to complete multiple logins or remember multiple passwords. Administrators can also add custom services to Enterprise Identity to giveusers access to internal applications. Users can access the services from any device they want to use, suchas iOS, Android, or BlackBerry 10 devices and other computing platforms.

Administrators use the BlackBerry UEM management console to add services, manage users, and to add andmanage additional administrators. The integration with BlackBerry UEM makes it easy to manage users andentitle them to access cloud applications and services from their devices. Using BlackBerry UEM, cloud servicesand mobile app binaries can be bundled together and then simply assigned to a user, or group of users.

Enterprise Identity can be purchased separately or licensed with the BlackBerry Enterprise Mobility Suite -Collaboration Edition, BlackBerry Enterprise Mobility Suite - Application Edition or BlackBerry Enterprise MobilitySuite - Content Edition.

For more information about Enterprise Identity, see the BlackBerry Enterprise Identity content.


https://docs.blackberry.com/en/id-comm-collab/blackberry-enterprise-id

Architecture: BlackBerry Enterprise Identity


Devices Users, including employees, employee candidates, partners, suppliers,and customers, who you want to have access to one or more cloud-basedapplications can authenticate from supported apps and from the browser onany device.

BlackBerry Enterprise Identity BlackBerry Enterprise Identity is hosted in the BlackBerry Infrastructure. Itprovides single sign-on, mobile zero-sign-on, and multifactor authenticationservices for cloud-based SaaS applications.

BlackBerry Infrastructure The BlackBerry Infrastructure is the BlackBerry network. It authenticates andauthorizes users, devices, and enterprise software.

External cloud applications Any cloud application, such as BlackBerry Workspaces, that you want toprovide single sign-on access to for your users.

BlackBerryUEM with EnterpriseIdentity plug-in

The Enterprise Identity plug-in for BlackBerry UEM allows administratorsto manage Enterprise Identity from the BlackBerry UEM or BlackBerry UEMCloud management console.

Company directory Enterprise Identity supports Microsoft Active Directory and LDAP companydirectories.

Internal cloud applications Internal cloud applications include any cloud-based application that usersaccess through your organization's network.



User's device with BlackBerry2FA

If you want to use two-factor authentication with EnterpriseIdentity, BlackBerry 2FA allows you to use your users’ devices as the secondfactor.

For iOS and Android devices, BlackBerry 2FA is included with the BlackBerryUEM Client.

For BlackBerry 10 and BlackBerry OS (version 6 to 7.1) devices, users mustinstall the BlackBerry 2FA app.

BlackBerry WorkspacesBlackBerry Workspaces is an enterprise file management platform that allows users to securely access,synchronize, edit, and share files and folders across multiple devices. BlackBerry Workspaces limits the risk fordata loss or theft by embedding digital rights management security into every file, so your content remains secureand within your control, even after it is downloaded and shared with others.

Users can access BlackBerry Workspaces from a Web browser and from appson Windows and macOS computers and on iOS, Android, and BlackBerry 10 devices. Content is synchronizedacross all of a user's devices when they are online, allowing users to manage, view, create, edit, and annotate filesfrom any device.

The Workspaces administration console allows you to configure, manage, and enforce security policies onfiles, regardless of where the files reside and track all document activities and report on them for auditingpurposes. If your organization has BlackBerry UEM or BlackBerry UEM Cloud, you can use the Workspaces plug-infor BlackBerry UEM to integrate Workspaces management into the BlackBerry UEM management console.

If your organization also implements BlackBerry Enterprise Identity, you can use Enterprise Identity to manageuser entitlement to Workspaces. For more information about Enterprise Identity see the BlackBerry EnterpriseIdentity content.

BlackBerry Workspaces can be purchased separately or licensed with the BlackBerry Enterprise Mobility Suite -Content Edition.

For more information about Workspaces, see the BlackBerry Workspaces content.

BlackBerry AnalyticsBlackBerry Analytics is a web-based tool that you can use to view information about the devices and BlackBerryDynamics apps in your organization's environment.

BlackBerry Dynamics apps send the following events to BlackBerry Analytics:

• App usage (launch count)• Daily/monthly active users: app launch for individual unique users• Crash count• Time zone from the device setting• Locale language from the device settings• App name• App version• Operating system


http://help.blackberry.com/detectLang/blackberry-enterprise-identity/current/

http://help.blackberry.com/detectLang/blackberry-enterprise-identity/current/

https://docs.blackberry.com/en/id-comm-collab/blackberry-workspaces

• Minutes used

BlackBerry Analytics does not collect or store any information that identifies a user.

BlackBerry Analytics is included with the BlackBerry Enterprise Mobility Suite - Application Edition andthe BlackBerry Enterprise Mobility Suite - Content Edition.

For more information about BlackBerry Analytics, see the BlackBerry Analytics content.

SecuSUITE for EnterpriseSecuSUITE for Enterprise is a software-based solution that provides secure calling and text messagingfor iOS, Android, and BlackBerry 10 devices. With SecuSUITE for Enterprise, technology that was designed toprotect national security has been adapted and optimized to secure your organization’s communications againstelectronic eavesdropping and third-party attacks.

SecuSUITE for Enterprise is hosted in the BlackBerry Infrastructure, which provides a direct connection to morethan 600 carriers, allowing users to connect securely with the people they need to talk to across networks aroundthe globe. SecuSUITE for Enterprise encryption and authentication processes run safely in the background of thedevice, without impacting performance or usability.

The SecuSUITE for Enterprise app is available for iOS, Android, and BlackBerry 10 devices. For BlackBerry10 devices, the device must be activated with BES10 or BlackBerry UEM. Your organization can usethe SecuSUITE for Enterprise app for iOS and Android devices without BES10 or BlackBerry UEM.

For more information about SecuSUITE for Enterprise, see the SecuSUITE for Enterprise content.

BlackBerry AtHocBlackBerry AtHoc Networked Crisis Communication is a comprehensive emergency mass notification systemused by military, government, and commercial organizations to provide physical security, force protection, andpersonnel accountability for their workforce. BlackBerry AtHoc is FedRAMP authorized, which is a mandatoryrequirement for US federal agency cloud deployments.

AtHoc empowers your organization to alert the people you care about, collect information from the fieldfor situational awareness, account for people before, during, and after an event, and connect with externalorganizations to enable the connected community to manage events. Using AtHoc, your leaders can protectyour personnel and operations through rapid communications, make informed decisions, and best position yourorganization to begin the recovery process for business continuity and sustained operational resilience.

AtHoc provides the following benefits:

• Comprehensive end-to-end emergency notification system that unifies all communication modalities to alerteveryone your organization cares about with a single click.

• Gives personnel in the field the ability to report events with rich geo-tagged media reports, plus a one-click"duress" button to report emergent situations for rapid response.

• Get status updates from select groups or all of your people to ensure your people are safe during emergencies,recall personnel, and conduct daily mustering.

• Share authoritative information with external targeted organizations, agencies, and the public in real-time during crises, empowering the connected community to collectively assess situations and provide acoordinated response to protect lives and property.

• Integrated weather alerts can access National Weather Service feeds to automatically trigger alerts based onweather type, severity, and location.

• Web-based user interface for user subscription, delivery preferences, and system administration.


https://docs.blackberry.com/en/endpoint-management/blackberry-analytics

https://docs.blackberry.com/en/id-comm-collab/secusuite-for-enterprise

https://marketplace.fedramp.gov/

• Message routing to targeted users. The Store-and-Forward capability saves alerts for desktop delivery when auser is offline and delivers them once a user’s presence is detected, if the alert is still alive.

For more information about BlackBerry AtHoc, see the AtHoc content.

BlackBerry UEM NotificationsBlackBerry UEM Notifications takes advantage of the BlackBerry AtHoc Networked Crisis Communicationsystem to allow BlackBerry UEM administrators to message users using SMS, phone, and email directly fromthe UEM management console. This add-on simplifies communications to end users and user groups byeliminating the need for additional messaging solutions. BlackBerry UEM Notifications cuts through the clutter ofeveryday messages, resulting in more users taking action.

BlackBerry UEM Notifications provides the following key capabilities:

• Leverage BlackBerry UEM for simplified communication• Multiple delivery methods (text, phone, and email)• Increased engagement from users

For more information about BlackBerry UEM Notifications, see the UEM Notifications guides in the BlackBerryUEM content.


https://docs.blackberry.com/en/id-comm-collab/blackberry-athoc



Enterprise appsBlackBerry offers several enterprise apps that administrators can push to devices or users can install to help themaccess work data and be more productive.


BlackBerry UEMClient

The BlackBerry UEM Client allows BlackBerry UEM to communicate with iOS, Android,and Windows Phone devices. This app must be installed to activate iOS, Android,and Windows Phone devices on BlackBerry UEM.

BlackBerry 2FA On BlackBerry 10 and BlackBerry OS (version 6.0 to 7.1) devices, users must installthe BlackBerry 2FA app to use their devices as a second authentication factor.

For iOS and Android devices, BlackBerry 2FA functionality is included withthe BlackBerry UEM Client.

BlackBerryWorkspaces app

The BlackBerry Workspaces app allows you to access your BlackBerryWorkspaces account to view, comment, notify, annotate, edit, and securely shareyour files with others. Files opened in the BlackBerry Workspaces app are controlledand protected at all times, ensuring that your organization’s data remains safe.The BlackBerry Workspaces app is available for Windows and macOS tablets andcomputers and iOS, Android, and BlackBerry 10 devices.

BlackBerryDynamics apps

BlackBerry Dynamics productivity apps such as BlackBerry Work, BlackBerryAccess, BlackBerry Connect, and BlackBerry Docs To Go provide users with access towork data and productivity tools.

BBM Enterprise BBM Enterprise provides an additional layer of end-to-end encryption for BBM messagessent between BBM Enterprise users in your organization and other BBM users.

BlackBerryEnterprise BRIDGE

BlackBerry Enterprise BRIDGE is a Microsoft Intune app that is enabled for BlackBerryDynamics. It allows you to securely view, edit, and save documents using Intune-managed Microsoft apps.

| Enterprise apps | 27

BlackBerry UEM ClientThe BlackBerry UEM Client is an app that allows BlackBerry UEM to manage iOS, Android, and WindowsPhone devices. Users must install the BlackBerry UEM Client before activating an iOS, Android, or WindowsPhone device for mobile device management with BlackBerry UEM.

Users can download the latest version of the BlackBerry UEM Client from the App Store for iOS devices,from Google Play for Android devices or from the Windows app store for Windows Phone devices.

After users activate their devices, the BlackBerry UEM Client allows users to do the following:

• Verify whether their devices are compliant with the organization's standards• View the profiles that have been assigned to their user accounts• View the IT policy rules that have been assigned to their user accounts• Access work apps• Create access keys for BlackBerry Dynamics apps• Preauthenticate with BlackBerry 2FA (iOS and Android only)• Access a software OTP code• Deactivate their devices

For more information about the BlackBerry UEM Client, see the BlackBerry UEM Administratorcontent and the BlackBerry UEM Client end user content.

BlackBerry Dynamics appsBlackBerry Dynamics productivity apps provide users with access to work data and productivity tools. BlackBerryDynamics apps developed by BlackBerry include the following apps:

App Description

BlackBerry Work The BlackBerry Work app provides secure access to work email and allows usersto view and send attachments, create custom contact notifications, and managetheir messages.

For more information about BlackBerry Work, see the BlackBerry Work content.

BlackBerry Access BlackBerry Access is a secure browser that allows users to access work intranetsand web applications. BlackBerry Access also allows you to enable access towork resources or build and deploy rich HTML5 apps, while maintaining a highlevel of security and compliance.

For more information about BlackBerry Access, see the BlackBerryAccess content.

BlackBerry Connect BlackBerry Connect allows communication and collaboration with secure instantmessaging, company directory lookup, and user presence from an easy-to-useinterface on the user’s device.

For more information about BlackBerry Connect, see the BlackBerryConnect content.


https://docs.blackberry.com/en/endpoint-management/blackberry-uem/current/administration/Getting_started_0/blackberry-uem-client

https://docs.blackberry.com/en/endpoint-management/blackberry-uem/current/administration/Getting_started_0/blackberry-uem-client

https://docs.blackberry.com/en/endpoint-management/blackberry-uem-client

https://docs.blackberry.com/en/blackberry-dynamics-apps/blackberry-work/

https://docs.blackberry.com/en/blackberry-dynamics-apps/blackberry-access/

https://docs.blackberry.com/en/blackberry-dynamics-apps/blackberry-access/

https://docs.blackberry.com/en/blackberry-dynamics-apps/blackberry-connect/

https://docs.blackberry.com/en/blackberry-dynamics-apps/blackberry-connect/

App Description

BlackBerry Tasks BlackBerry Tasks allows users to create, edit, and manage tasks that aresynchronized with Microsoft Exchange.

For more information about BlackBerry Tasks, see the BlackBerry Tasks content.

BlackBerry Notes BlackBerry Notes allows users to create, edit, and manage notes that aresynchronized with Microsoft Exchange on their mobile device of choice.

For more information about BlackBerry Notes, see the BlackBerry Notes content.

You can also use BlackBerry Dynamics apps developed by one of BlackBerry's many third-party applicationpartners. For a full list of publicly available apps, visit the BlackBerry Marketplace for Enterprise Software.

You can also develop your own BlackBerry Dynamics apps using the BlackBerry Dynamics SDK. For moreinformation, see the BlackBerry Dynamics SDK content.

BBM EnterpriseBBM Enterprise adds a layer of end-to-end encryption for BBM messages sent between BBM Enterprise usersin your organization and other BBM users inside or outside of your organization. BBM Enterprise is availablefor iOS, Android, BlackBerry 10, Windows, and macOS devices.

BBM Enterprise uses a FIPS 140-2 validated cryptographic library. Your organization owns the encryption keysand no one else, not even BlackBerry, can access them.

For most devices, you can use BlackBerry UEM to assign BBM Enterprise to users. For BlackBerry 10 devices, youmust use a legacy, stand-alone version of BlackBerry Enterprise Identity to assign BBM Enterprise to users. Therequired version of Enterprise Identity is provided with BBM Enterprise.

After you enable users to use BBM Enterprise, users can download the BBM Enterprise app from the App Store,the Google Play store, or BlackBerry World.

For more information about BBM Enterprise, see the BBM Enterprise content.

BlackBerry Enterprise BRIDGEBlackBerry Enterprise BRIDGE is a Microsoft Intune app that is enabled for BlackBerry Dynamics. It allowsyou to securely view, edit, and save documents using Intune-managed Microsoft apps, such as MicrosoftWord, Microsoft PowerPoint, and Microsoft Excel in BlackBerry Dynamics on iOS and Android devices. BlackBerryEnterprise BRIDGE includes the following features:

Feature Description

Secure sharing and storing ofdata

Share your documents as email attachments (requires BlackBerryWork). Maintain data encryption during the document-sharing processbetween BlackBerry Work and Intune managed mobile apps.

Document access and editing Access documents while you are on the go from native Microsoft mobileapps. View, edit, and save documents.


https://docs.blackberry.com/en/blackberry-dynamics-apps/blackberry-tasks/

https://docs.blackberry.com/en/blackberry-dynamics-apps/blackberry-notes/

https://marketplace.blackberry.com/apps

https://docs.blackberry.com/en/development-tools/blackberry-dynamics-sdk-android/

https://docs.blackberry.com/en/id-comm-collab/bbm-enterprise/latest

Feature Description

User experience Seamlessly transfer files to native Microsoft mobile apps fromwithin BlackBerry Work.

Document fidelity Documents are rendered with Microsoft native fidelity on all devices.

PDF slide show presentationtool

On iOS devices, use BlackBerry Enterprise BRIDGE to present PDF slide shows.

For more information about BlackBerry Enterprise BRIDGE, see the BlackBerry Enterprise BRIDGE content.


https://docs.blackberry.com/en/blackberry-dynamics-apps/blackberry-bridge/

Enterprise SDKsBlackBerry offers several SDK options to help your organizaion customize your BlackBerry solution.


BlackBerry UEMIntegration SDK

The BlackBerry UEM Integration SDK allows developers to create and deploy BlackBerryUEM plug-ins that allow for the tight integration of new features or services with anexisting BlackBerry UEM installation.

BlackBerryDynamics SDK

The BlackBerry Dynamics SDK allows developers to quickly and easily build their ownsecure productivity apps.

BlackBerryAnalytics SDK

The BlackBerry Analytics SDK works with the BlackBerry Dynamics SDK to send eventsfrom your custom apps to BlackBerry Analytics.

SparkCommunicationsServices SDK

The Spark Communications Services SDK provides a framework to develop real-time,end-to-end secure messaging capabilities in your own product or service.

BlackBerry WebServices

The BlackBerry Web Services are a collection of SOAP and REST web services that youcan use to create applications to manage your organization's BlackBerry UEM domain,user accounts, and all supported devices.

BlackBerry UEM Integration SDKThe BlackBerry UEM Integration SDK allows developers to create plug-ins that extend the functionalityof BlackBerry UEM version 12.7 or later. Using the UEM Integration SDK (which includes the UEM Integration plug-in for Eclipse) and the UEM Integration APIs, you can create and deploy BlackBerry UEM plug-ins that allow for thetight integration of new features or services with an existing BlackBerry UEM installation.

BlackBerry UEM plug-ins provide the following benefits:

Feature Description

Add new featuresto BlackBerry UEM

You can implement new features for user and device management, monitoring,reporting, integration with third-party systems, and more.

Integrate new services You can integrate custom services with BlackBerry UEM to extend service-basedfunctionality to device users. For example, the BlackBerry Workspaces plug-in allows an administrator to integrate Workspaces file-sharing services withan existing BlackBerry UEM domain. Administrators can use the managementconsole to assign the Workspaces service to users and groups and to configureand manage various aspects of the service, including distribution lists,workspaces, and document settings.

Add UI components tothe management console

You can expose the UI for new features or services in the management console,including configuration settings, enable and disable options, administratorpermissions, and user assignment mechanisms. Features or services can also beimplemented as "back-end" changes with no UI impact.

| Enterprise SDKs | 31

http://help.blackberry.com/detectLang/blackberry-workspaces-plug-in-for-blackberry-uem/current/

http://help.blackberry.com/detectLang/blackberry-workspaces-plug-in-for-blackberry-uem/current/

Feature Description

Leverageexisting UEM features

The new features or services that you integrate with BlackBerry UEM can leveragethe existing capabilities of the platform, including role-based authorization, highavailability, group and user management, logging, monitoring, and licensing.

Leverage existingsystems

You can integrate BlackBerry UEM plug-ins with and use data from existingsystems, including an organization's company directory and key componentsof the BlackBerry Infrastructure (for example, the licensing infrastructure andprovisioning servers).

Add custom APIs You can add new APIs to BlackBerry UEM that can be exposed on anexisting BlackBerry UEM port. For example, you can implement APIs that allow athird-party product to obtain information about the status of activated devices.

You can request the free UEM Integration SDK package from the Developers for Enterprise Apps portal. The SDKpackage gives you everything you need to get started, including the UEM Integration plug-in for Eclipse, severalcode samples, and API references.

For more information about the BlackBerry UEM Integration SDK, see the BlackBerry UEM Integration SDK content

BlackBerry Dynamics SDKThe BlackBerry Dynamics SDK provides a powerful set of tools to ISV and enterprise developers, allowingthem to focus on building their apps rather than learning how to secure, deploy, and manage those apps.The BlackBerry Dynamics SDK can be used to develop native, hybrid, and web apps for iOS, macOS, Android,and Windows devices, with services such as the following:

• Security services (e.g., secure communications and interapp data exchange APIs)• Mobile services (e.g., presence, email, push, directory lookup)• Platform services (e.g., single sign-on authentication, indentity and access management, app-level controls for

admins)

For more information about the BlackBerry Dynamics SDK, see the BlackBerry Dynamics SDK content

Spark Communications Services SDKThe BlackBerry Spark Communications Services SDK provides a framework to develop real-time, end-to-endsecure messaging capabilities in your own product or service. The Spark Communications Services securitymodel ensures that only the sender and intended recipient can see each message sent, and that messages aren'tmodified in transit between the sender and recipient.

The Spark Communications Services SDK also provides the framework for other forms of collaboration andcommunication, such as push notifications, secure voice and video calls, and file sharing. You can even extendand create new types of real-time services and use cases by defining your own custom application protocols anddata types.

For more information about the Spark Communications Services, see the Spark Communications Services SDKfor iOS content or Spark Communications Services SDK for Android content


https://community.blackberry.com/community/gdn/resources/uem/uem-integration-sdk

https://docs.blackberry.com/en/development-tools/blackberry-uem-integration-sdk/

https://docs.blackberry.com/en/development-tools/blackberry-dynamics-sdk-android/

https://docs.blackberry.com/en/development-tools/blackberry-spark-communications-services-for-ios/latest.html

https://docs.blackberry.com/en/development-tools/blackberry-spark-communications-services-for-ios/latest.html

https://docs.blackberry.com/en/development-tools/blackberry-spark-communications-services-for-android/latest.html

BlackBerry Web ServicesThe BlackBerry Web Services are a collection of SOAP and REST web services that you can use to createapplications to manage your organization's BlackBerry UEM domain, user accounts, and all supported devices.You can use the BlackBerry Web Services to automate many tasks that administrators typically perform using themanagement console. For example, you can create an application that automates the process of creating useraccounts, adds users to multiple groups, and manages users' devices.

To use the BlackBerry Web Services to develop custom applications you should be proficient with Java orthe Microsoft .NET Framework and in the use of XML, REST or SOAP, and WSDL. You should also be familiar withthe configuration and administration of BlackBerry UEM, including the management of user accounts, groups, ITpolicies, software configurations, and security settings.

The BlackBerry Web Services are installed when you install BlackBerry UEM.

For more information about the BlackBerry Web Services, see the BlackBerry Web Services for BlackBerryUEM content.

Note:

The BlackBerry Web Services SOAP APIs are supported and released with every version of BlackBerry UEM, butare officially in maintenance mode. See the BlackBerry Web Services 12.9 SOAP API reference for completeinformation about the supported legacy SOAP APIs. For information about the BlackBerry Dynamics SOAPAPIs that are compatible with the BlackBerry Web Services SOAP APIs, see BlackBerry UEM compatibility withthe BlackBerry Dynamics SOAP APIs.

If your organization uses the BlackBerry Web Services SOAP APIs, going forward BlackBerry recommendstransitioning to the BlackBerry Web Services REST APIs. The REST APIs are updated with new functionality inevery BlackBerry UEM release.

Architecture: BlackBerry Web Services and BlackBerry UEM


BlackBerry Web Services Collections of REST or SOAP web services that you can use to performadministrative tasks in your organization's BlackBerry UEM domain.


https://docs.blackberry.com/en/development-tools/blackberry-web-services-for-blackberry-uem/


https://developer.blackberry.com/files/bws/reference/blackberry_uem_12_9_soap/





Client application A custom app that you can develop and integrate with the BlackBerryWeb Services to manage user accounts and devices that are associatedwith BlackBerry UEM.

The client applications you create use the administrator accountcredentials to authenticate with the BlackBerry Web Services. After anapplication is authenticated, the BlackBerry Web Services are initialized,and the BWS and BWSUtil web services are ready to receive API callsfrom the application.


GlossaryBYOD bring your own device

COBO corporate-owned, business only

COPE corporate-owned, personal enabled

EMM Enterprise Mobility Management

FIPS Federal Information Processing Standards

HTTP Hypertext Transfer Protocol

IP Internet Protocol

IPPP Internet Protocol Proxy Protocol

ISV independent software vendor

IT policy An IT policy consists of various rules that control thesecurity features and behavior of devices.

LDAP Lightweight Directory Access Protocol

MAM mobile application management

MDM mobile device management

NOC Network Operations Center

OTP one-time password

SaaS Software as a Service

SIM Subscriber Identity Module

SMS Short Message Service

SOAP Simple Object Access Protocol

SRP Server Routing Protocol

TCP Transmission Control Protocol

UEM Unified Endpoint Manager

VPN virtual private network

WSDL Web Services Description Language

| Glossary | 35

XML Extensible Markup Language

| Glossary | 36

Legal notice ©2018 BlackBerry Limited. Trademarks, including but not limited to BLACKBERRY, BBM, BES, EMBLEM Design,ATHOC, MOVIRTU and SECUSMART are the trademarks or registered trademarks of BlackBerry Limited, itssubsidiaries and/or affiliates, used under license, and the exclusive rights to such trademarks are expresslyreserved. All other trademarks are the property of their respective owners.

Android and Google Play are trademarks of Google Inc. App Store and macOS are trademarks of AppleInc. Box is including without limitation, either a trademark, service mark or registered trademark of Box,Inc. Cisco WebEx is a trademark of Cisco Systems, Inc. and/or its affiliates in the United States and certain othercountries. iOS is a trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries.iOS® is used under license by Apple Inc. Java is a trademark of Oracle and/or its affiliates. Microsoft, ActiveDirectory, ActiveSync, Excel, Intune, PowerPoint, SharePoint, Windows, and Windows Phone are either registeredtrademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Salesforce is atrademark of salesforce.com, inc. and is used here with permission. Samsung, KNOX, and Samsung KNOX aretrademarks of Samsung Electronics Co., Ltd. Wi-Fi is a trademark of the Wi-Fi Alliance. All other trademarks arethe property of their respective owners.

This documentation including all documentation incorporated by reference herein such as documentationprovided or made available on the BlackBerry website provided or made accessible "AS IS" and "AS AVAILABLE"and without condition, endorsement, guarantee, representation, or warranty of any kind by BlackBerry Limited andits affiliated companies ("BlackBerry") and BlackBerry assumes no responsibility for any typographical, technical,or other inaccuracies, errors, or omissions in this documentation. In order to protect BlackBerry proprietary andconfidential information and/or trade secrets, this documentation may describe some aspects of BlackBerrytechnology in generalized terms. BlackBerry reserves the right to periodically change information that is containedin this documentation; however, BlackBerry makes no commitment to provide any such changes, updates,enhancements, or other additions to this documentation to you in a timely manner or at all.

This documentation might contain references to third-party sources of information, hardware or software,products or services including components and content such as content protected by copyright and/or third-party websites (collectively the "Third Party Products and Services"). BlackBerry does not control, and is notresponsible for, any Third Party Products and Services including, without limitation the content, accuracy,copyright compliance, compatibility, performance, trustworthiness, legality, decency, links, or any other aspectof Third Party Products and Services. The inclusion of a reference to Third Party Products and Services in thisdocumentation does not imply endorsement by BlackBerry of the Third Party Products and Services or the thirdparty in any way.

EXCEPT TO THE EXTENT SPECIFICALLY PROHIBITED BY APPLICABLE LAW IN YOUR JURISDICTION, ALLCONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS, OR WARRANTIES OF ANY KIND, EXPRESSOR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY CONDITIONS, ENDORSEMENTS, GUARANTEES,REPRESENTATIONS OR WARRANTIES OF DURABILITY, FITNESS FOR A PARTICULAR PURPOSE OR USE,MERCHANTABILITY, MERCHANTABLE QUALITY, NON-INFRINGEMENT, SATISFACTORY QUALITY, OR TITLE, ORARISING FROM A STATUTE OR CUSTOM OR A COURSE OF DEALING OR USAGE OF TRADE, OR RELATED TO THEDOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE,SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN, ARE HEREBY EXCLUDED.YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY BY STATE OR PROVINCE. SOME JURISDICTIONS MAYNOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED WARRANTIES AND CONDITIONS. TO THE EXTENTPERMITTED BY LAW, ANY IMPLIED WARRANTIES OR CONDITIONS RELATING TO THE DOCUMENTATION TOTHE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE HEREBY LIMITED TONINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM THAT IS THESUBJECT OF THE CLAIM.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, IN NO EVENT SHALLBLACKBERRY BE LIABLE FOR ANY TYPE OF DAMAGES RELATED TO THIS DOCUMENTATION OR ITS USE,OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD

| Legal notice | 37

PARTY PRODUCTS AND SERVICES REFERENCED HEREIN INCLUDING WITHOUT LIMITATION ANY OF THEFOLLOWING DAMAGES: DIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, INDIRECT, SPECIAL, PUNITIVE,OR AGGRAVATED DAMAGES, DAMAGES FOR LOSS OF PROFITS OR REVENUES, FAILURE TO REALIZE ANYEXPECTED SAVINGS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, LOSS OF BUSINESSOPPORTUNITY, OR CORRUPTION OR LOSS OF DATA, FAILURES TO TRANSMIT OR RECEIVE ANY DATA,PROBLEMS ASSOCIATED WITH ANY APPLICATIONS USED IN CONJUNCTION WITH BLACKBERRY PRODUCTS ORSERVICES, DOWNTIME COSTS, LOSS OF THE USE OF BLACKBERRY PRODUCTS OR SERVICES OR ANY PORTIONTHEREOF OR OF ANY AIRTIME SERVICES, COST OF SUBSTITUTE GOODS, COSTS OF COVER, FACILITIES ORSERVICES, COST OF CAPITAL, OR OTHER SIMILAR PECUNIARY LOSSES, WHETHER OR NOT SUCH DAMAGESWERE FORESEEN OR UNFORESEEN, AND EVEN IF BLACKBERRY HAS BEEN ADVISED OF THE POSSIBILITY OFSUCH DAMAGES.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, BLACKBERRY SHALLHAVE NO OTHER OBLIGATION, DUTY, OR LIABILITY WHATSOEVER IN CONTRACT, TORT, OR OTHERWISE TOYOU INCLUDING ANY LIABILITY FOR NEGLIGENCE OR STRICT LIABILITY.

THE LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS HEREIN SHALL APPLY: (A) IRRESPECTIVE OF THE NATUREOF THE CAUSE OF ACTION, DEMAND, OR ACTION BY YOU INCLUDING BUT NOT LIMITED TO BREACH OFCONTRACT, NEGLIGENCE, TORT, STRICT LIABILITY OR ANY OTHER LEGAL THEORY AND SHALL SURVIVE AFUNDAMENTAL BREACH OR BREACHES OR THE FAILURE OF THE ESSENTIAL PURPOSE OF THIS AGREEMENTOR OF ANY REMEDY CONTAINED HEREIN; AND (B) TO BLACKBERRY AND ITS AFFILIATED COMPANIES, THEIRSUCCESSORS, ASSIGNS, AGENTS, SUPPLIERS (INCLUDING AIRTIME SERVICE PROVIDERS), AUTHORIZEDBLACKBERRY DISTRIBUTORS (ALSO INCLUDING AIRTIME SERVICE PROVIDERS) AND THEIR RESPECTIVEDIRECTORS, EMPLOYEES, AND INDEPENDENT CONTRACTORS.

IN ADDITION TO THE LIMITATIONS AND EXCLUSIONS SET OUT ABOVE, IN NO EVENT SHALL ANY DIRECTOR,EMPLOYEE, AGENT, DISTRIBUTOR, SUPPLIER, INDEPENDENT CONTRACTOR OF BLACKBERRY OR ANYAFFILIATES OF BLACKBERRY HAVE ANY LIABILITY ARISING FROM OR RELATED TO THE DOCUMENTATION.

Prior to subscribing for, installing, or using any Third Party Products and Services, it is your responsibility toensure that your airtime service provider has agreed to support all of their features. Some airtime serviceproviders might not offer Internet browsing functionality with a subscription to the BlackBerry® Internet Service.Check with your service provider for availability, roaming arrangements, service plans and features. Installationor use of Third Party Products and Services with BlackBerry's products and services may require one or morepatent, trademark, copyright, or other licenses in order to avoid infringement or violation of third party rights. Youare solely responsible for determining whether to use Third Party Products and Services and if any third partylicenses are required to do so. If required you are responsible for acquiring them. You should not install or useThird Party Products and Services until all necessary licenses have been acquired. Any Third Party Products andServices that are provided with BlackBerry's products and services are provided as a convenience to you and areprovided "AS IS" with no express or implied conditions, endorsements, guarantees, representations, or warrantiesof any kind by BlackBerry and BlackBerry assumes no liability whatsoever, in relation thereto. Your use of ThirdParty Products and Services shall be governed by and subject to you agreeing to the terms of separate licensesand other agreements applicable thereto with third parties, except to the extent expressly covered by a license orother agreement with BlackBerry.

The terms of use of any BlackBerry product or service are set out in a separate license or other agreement withBlackBerry applicable thereto. NOTHING IN THIS DOCUMENTATION IS INTENDED TO SUPERSEDE ANY EXPRESSWRITTEN AGREEMENTS OR WARRANTIES PROVIDED BY BLACKBERRY FOR PORTIONS OF ANY BLACKBERRYPRODUCT OR SERVICE OTHER THAN THIS DOCUMENTATION.

BlackBerry Enterprise Software incorporates certain third-party software. The license and copyright informationassociated with this software is available at http://worldwide.blackberry.com/legal/thirdpartysoftware.jsp.

BlackBerry Limited2200 University Avenue EastWaterloo, Ontario

| Legal notice | 38

http://worldwide.blackberry.com/legal/thirdpartysoftware.jsp

Canada N2K 0A7

BlackBerry UK Limited200 Bath RoadSlough, Berkshire SL1 3XEUnited Kingdom

Published in Canada

| Legal notice | 39