In this two part lab, you learn how to configure MaaS360 Cloud Extender’s Certificate Integration module to integrate with a Microsoft CA to provision identity certificates for mobile devices. After you set up the Certificate Integration module, you configure the Enterprise Gateway module to use identity certificates for authentication.

In this lab, you will learn how to deploy a test environment that integrates IBM MaaS360 and IBM Cloud Identity Essentials with a third-party SaaS (cloud) application.

The MaaS360 Cloud Extender is a lightweight software module that you install in your environment. You use the Cloud Extender to integrate MaaS360 with your behind the firewall corporate resources. In this lab you set up the MaaS360 Cloud Extender to integrate with Active Directory (AD) using LDAP. You configure the User Authentication module to support self-service enrollment so that device users can enroll in MaaS360 using their corporate credentials. You configure the User Visibility module to import users and groups into Maas360 from AD. You can use these users and groups to assign policies and distribute corporate content. Taking advantage of an existing directory service eliminates the need for administrators to create local users and groups in Maas360. You also learn testing and troubleshooting techniques in this lab using the MaaS360 portal and mobile devices.

The Enterprise Gateway is a downloadable module of the MaaS360 Cloud Extender that provides secure access to behind the firewall resources from mobile devices. The Enterprise Gateway works hand in hand with the MaaS360 Secure Mobile Browser and MaaS360 SDK-enabled apps, which include the MaaS360 App itself. In this lab, you configure the Enterprise Gateway module to provide secure access to intranet sites and Windows Files Share. You configure WorkPlace Persona policies to enable the Secure Mobile Browser and Enterprise Gateway access. You also learn testing and troubleshooting techniques in this lab using the MaaS360 portal and mobile devices.

In this lab, you explore integrating IBM MaaS360, IBM Cloud Identity, and Active Directory Federation Service (ADFS). In this scenario, Cloud Identity acts as an alternate IaaS (Identity as a Service) provider to ADFS so when ADFS detects a mobile device user, it redirects the authentication request to Cloud Identity. Cloud Identity works with MaaS360 to manage device compliance and enrollment requirements. This lab walks you through integrating all 3 tools in a cohesive, zero-touch, architecture that does not impact your business operations.

In this training, you learn about the Cloud Extender Certificate Integration module that you can use to integrate cloud- and on-premises-based certificate authorities with IBM MaaS360 for advanced authentication schemes.