Demystifying SAP Afaria and managing mobile devices

8 May 2014

Brenton O'Callaghan

Brenton O'Callaghan

Global Head of SAP Leonardo

Every day we hear about the release of new amazing technologies covering areas from wearable technology to concepts like remote surgery. There has never been a more exciting time in the tech world probably since the invention of the modern computer itself. But with these fast changing technologies comes a natural inability to keep abreast of everything that is out there.

Over the last few weeks at least three customers have asked me about SAP Afaria – simply, what is it? I will give SAP / Sybase this, it’s a great name for a product but it’s not immediately obvious what it is. So what is it?

What is SAP Afaria?

SAP Afaria is one of the core components of SAP's Mobile offering specifically for managing your mobile device estate. Acquired by SAP as part of the acquisition of Sybase, it aims to allow for the management of corporate as well as personally owned mobile (and non-mobile) devices. The feature highlights of Afaria include:

  • Support for most modern mobile platforms (e.g. iOS, Android, Windows and more)
  • Complete mobile device management
  • Remote management (wipe, notifications, locking and policy enforcement)
    • Ability to push down apps
  • Self-service elements that facilitate user-driven requests and personal management
    • Corporate app store
    • Self-service device functions (lost devices, etc.)
  • Highly scalable to facilitate large and growing organisations

In a nutshell – SAP Afaria provides the ability to monitor, administer, secure and deploy mobile devices in your organisation.

What about security?

With any mobile scenario you have to consider security. SAP Afaria brings a number of elements to the table on this front. As with any good MDM (mobile device management) solution, Afaria enables you to enforce policies including encryption, passcodes, certificate-based authentication, proxy use, Network settings, and so on. The list is really endless.

The platform itself runs on Microsoft Windows Server and so has the ability to take advantage of industry standard mechanisms like SSL (secure socket layer) for communications and advanced authentication mechanisms.

On top of this, for iOS and Android, SAP Afaria provides a set of functions (libraries), which can be embedded into any custom application to facilitate even greater security such as client certificates and in-app settings.

How do you keep control of corporate apps on-device?

We've covered security, but a large part of security concerns usually involves the data / IP that resides on a user's device in the form of the apps or data itself. Afaria has the ability to retain full control over any app installation on device including:

  • Allowing users to opt to install apps through an app catalogue
  • Force down specific apps to a user's device based on dynamic policies
  • Automatically remove apps from users devices without any user interaction
  • Even prevent corporate data from being backed up when users backup their personal devices

Why choose SAP Afaria?

There are a huge number of mobile device management solutions available on the market today and quite a few are excellent in their own right. Where I have found that Afaria is the leader is in the area of integration. Each SAP Afaria implementation I have gone through has benefitted most from the tight integration we managed to achieve with the client’s own systems such as identity management systems (Active Directory etc.) and crucially the client’s PKI or Public Key Infrastructure for secure certificate deployment.

As I mentioned, SAP Afaria provides a set of functions or libraries that can be integrated into any corporate iOS or Android application to allow for in-app management and security provisioning. This end-to-end integrated solution brings amazing benefits when managing your mobile estate not least that it helps to standardise the way you approach security in your corporate apps.

Finally, SAP Afaria is not a new product, far from it with the current version number being 7. What this does means is that an SAP Afaria implementation benefits from quite a number of years of experience in this space over a wide range of industries and as a result, has the features that any large-scale deployment would need to be successful.

How do you get started?

If security and control are a concern for your organisation then an evaluation of SAP Afaria is a no-brainer. Although I do think Afaria is a great product, the only way to truly understand if it will fit your organisation is to try it out. For this there are a number of options:

  1. Install the trial and see what it can do
  2. Give the cloud hosted trial a whirl

Both options are fairly straightforward to get up and running and will give a greater understanding of where Afaria sits in relation to your requirements.

My rule of thumb when it comes to evaluating any solution is to try it out on a temporary basis (PoC) first and see if you can get 80% of what you want out of it– the other 20% will come with a full implementation. These “fire and forget” proof of concept systems should be everyday activities in your team. After being involved in a number of these proof of concept teams over the last few years and I can honestly say it is the best way to evaluate new products.

Final words

As a CIO or CTO the word "control" is always a good thing and this is what SAP Afaria brings - granular control and the ability to be secure in the knowledge that no aspect of your BYOD or corporate device management is given to chance.

I’ll end this by reminding you that SAP Afaria is but one piece of the SAP Mobility puzzle. Afaria provides device management but don't forget to look at the rest of the components to get the full picture:

View comments

Comments

Blog post currently doesn't have any comments.

About the author

Brenton O'Callaghan

Global Head of SAP Leonardo

Enterprise technology consultant & emerging technology evangelist

To date I've focussed on emerging technologies in the SAP space from in-memory with SAP HANA since 2011 to SAP Leonardo released in 2017.  I've led award winning projects using these technologies including one of the first SAP Fiori implementations globally for Bluefin.

All of my focus currently is on introducing my Fortune 250 clients to the SAP Leonardo Innovation process, helping them kick-start a program of digital innovation using the SAP Cloud Platform.  I also work closely with SAP's Leonardo and HANA product teams to help them develop roadmaps and bring customer feedback closer to these products.

Outside of work you'll likely find me kicking back with a Guinness or watching some sort of sport (either Munster Rugby or the Red Sox).

 

Bluefin and SAP S/4HANA - welcome to the one horse race