The mobile app is a cross-platform endpoint client, installed on end users' mobile devices. The app is used to register and authenticate end users' devices with the Cloud Command Center. Note that the mobile app is optional on MDM-managed devices, on which you can install a Device Certificate via your device manager.

What the mobile app is for

In a zero-trust model, corporate resources should be reachable only from known, trusted devices. The mobile app establishes that trust on an end user's phone or tablet: it registers the device with the organization, authenticates the user through the organization's Identity Provider, and lets administrators evaluate device posture before granting access.

How it works

1. The end user installs the app and registers the device with the organization, receiving a Trusted Device Certificate.
2. The device's posture is evaluated through Device Trust Scoring.
3. Once registered and trusted, the end user can reach the Service Tunnels and Hosted Websites made available to them.

When to use the mobile app

Use the mobile app for end-user devices that are not managed through a Mobile Device Management (MDM) system. On MDM-managed devices, you may instead distribute a Device Certificate through your device manager, in which case the app is optional.

Tip: To get started, see Register the Mobile App & Supported OSs.

Sections

• Register the Mobile App & Supported OSs
• Accessing Services and Networks via the Mobile App
• Mobile App Troubleshooting

Key features of the mobile app

The mobile app provides the following features:

• Device Registration for device authentication
• Device Trust Scoring for device posture checks
• Auto-update capability so an end user can upgrade with a single click
• List of Service Tunnels an end user can access
• List of Hosted Websites an end user can access