3 ms·

Do these device management tools extend to personal cell phones that have corporate software installed on them? For example, using a token that’s generated on t

Do these device management tools extend to personal cell phones that have corporate software installed on them? For example, using a token that’s generated on the phone to log in to the corporate VPN while working remotely from home, would this give a company the same device management access?

dogman144 5y ago
It depends on what that corporate software is. Only a few of them skew towards real-time viewing of behavior. If what you’re referring to just generates a token that you then use to log onto a Vpn on a work device, that token generation is likely really limited in its access. The less like Google Auth, and the more like a custom solution the tool is, the more you have to think about device access you’re giving. I operate under the assumption any work business I do on any device is potentially logged extensively. The tools you want to be aware of installing on personal devices are “MDM” or similar, at a high level. Those get potentially large access.
- wheelinsupial 5y ago
  Thanks for the response. I am not familiar with either Google Auth of MDM. The token is installed with a suite of Microsoft apps such as Outlook and Teams. I definitely assume work provided devices are logged and I've been told work provided cell phones are logged, but I don't know if that extends to personal devices. Of course best case would be to try and find out if there is a way to use an external token generator to keep work off a personal device.
  - dogman144 5y ago
    If you name the app, can prob give a guesstimate
    - wheelinsupial 5y ago
      It's called SecureAuth Authenticate. Thanks for your time!
      - dogman144 5y ago
        Since it can do push notifications, prob some telemetry phones home to corporate around user agent/ip, minimal fingerprinting like that. This part is interesting, future feature, wonder how they detect that on a personal device: “ Jailbreak detection If a user installs SecureAuth Authenticate on a jailbroken or rooted phone, SecureAuth will detect the occurrence and will not allow the user to set up a SecureAuth account. (Coming Soon)” Ultimately, read your AUP and BYOD policy and see what you did/did not sign away wrt monitoring on personal devices. Quite likely you can raise an HR stink if this app had more than just basic telemetry and they mandate it to be on a personal device.

dogman144 5y ago

It depends on what that corporate software is. Only a few of them skew towards real-time viewing of behavior. If what you’re referring to just generates a token that you then use to log onto a Vpn on a work device, that token generation is likely really limited in its access. The less like Google Auth, and the more like a custom solution the tool is, the more you have to think about device access you’re giving. I operate under the assumption any work business I do on any device is potentially logged extensively. The tools you want to be aware of installing on personal devices are “MDM” or similar, at a high level. Those get potentially large access.

wheelinsupial 5y ago
Thanks for the response. I am not familiar with either Google Auth of MDM. The token is installed with a suite of Microsoft apps such as Outlook and Teams. I definitely assume work provided devices are logged and I've been told work provided cell phones are logged, but I don't know if that extends to personal devices. Of course best case would be to try and find out if there is a way to use an external token generator to keep work off a personal device.
- dogman144 5y ago
  If you name the app, can prob give a guesstimate
  - wheelinsupial 5y ago
    It's called SecureAuth Authenticate. Thanks for your time!
    - dogman144 5y ago
      Since it can do push notifications, prob some telemetry phones home to corporate around user agent/ip, minimal fingerprinting like that. This part is interesting, future feature, wonder how they detect that on a personal device: “ Jailbreak detection If a user installs SecureAuth Authenticate on a jailbroken or rooted phone, SecureAuth will detect the occurrence and will not allow the user to set up a SecureAuth account. (Coming Soon)” Ultimately, read your AUP and BYOD policy and see what you did/did not sign away wrt monitoring on personal devices. Quite likely you can raise an HR stink if this app had more than just basic telemetry and they mandate it to be on a personal device.