CA Identity Manager Administration Guide › CA Identity Manager Mobile App › Configure a Mobile App

Configure a Mobile App

System administrators configure the CA Identity Manager mobile app in the User Console.

An environment can include multiple mobile app configurations. Creating different configurations allows you to support different branding or functionality for different types of mobile users. For example, you can create one configuration for employee password changes, and another configuration for managers to approve work items.

Administrators can configure the following properties for the mobile app:

• Branding

  Specify the company logo in the mobile app.

• Functionality

  Enable the following functionality:

  • Forgotten password support
  • Change password support
  • Workflow approval queue
  • Show manager link
• Support information
• Attribute mapping

  Map attributes in the user store to attributes exposed in the mobile app.

Follow these steps:

1. Log into the User Console as a user who can use the mobile configuration tasks.
2. Click Tasks, System, Mobile Configuration, Create Mobile Configuration.
3. Accept the default option, Create a new object of type Mobile Configuration.
4. On the General tab, complete the required fields. You can specify an image for the mobile app.

   Base URL

   Verify the base URL of the current environment. The base URL is automatically populated when you create a mobile configuration.

   CA Identity Manager uses the base URL to retrieve the server name, port and protocol, which the mobile app uses to construct the URL for the REST calls.

   Configuration

   Browse for a configuration or enter a unique configuration name.

   Version

   Increase the version number every time you modify and save a configuration.

   The mobile app uses the version number to determine when to download a new version of the configuration. When the mobile app starts up, it compares the version number from the server with the version of the loaded configuration. If a new version is available, the mobile app updates the configuration.

   Note: Do not increment the version number when you initially modify the file.

   Branding Image

   Specify the full URL of a PNG image with a transparent background. The image appears at the top of the screen in the mobile app.

5. On the Features tab, select the features for the mobile app.

   Password Reset Behavior

   Select the method to use for the behavior, which is determined when you configure required attributes:

   • Default
   • PIN Challenge
   • QnA Challenge

   Note: If you select QnA Challenge, you must go to Tasks, Environment Administrator, and then select 'Question and Answer Configuration'. Make sure to check the Enable box, enter the number of authentication questions (1 through 5), and then click Submit. You must click the Submit button for the configuration settings to take effect, even if you make no changes to the default settings.

6. On the Support tab, specify support information for mobile users.
7. On the Attribute Mapping tab, map mobile app attributes to attributes in the CA Identity Manager user store. You can map attributes to physical attributes or well-known attributes.
8. On the Additional Properties tab, specify additional property value pairs to support new functionality or fields in the mobile app.

   Use the following format:

   Key1=value1

   Key2=value2

   Key3=value3

   Note: CA Technologies will provide instructions when administrators need to add additional properties. In this release, you do not need to specify any additional properties.

9. On the Members tab, specify rules that determine the set of users who see this configuration on their mobile app.
10. Click Submit.

Configuring Additional Properties

After you configure the mobile app, you can optionally specify additional property key-value pairs to support new functionality in the mobile app. You do this using the Additional Properties tab.

Use the following format:

• demoMode="Disable/Enable"
• maxPinRetries=<any positive numerical value>
• multiAccount="Disable/Enable"
• managerTraversal="Disable/Enable"
• startupWithBrandLogo="true/false"

Note: CA Technologies will provide instructions when administrators need to add additional properties.

However, these three features are enabled by default with mobile configurations:

• DemoMode: Allows you view a demonstration-version of the mobile app. This option is available in the Settings section of mobile app.
• maxPinRetries: Allows administrator to configure the number of wrong or failed PIN entry-attempts for mobile users. The default number of failed attempts is 5.
• MultiAccount: Allows you to add multiple accounts, specifically by adding multiple registered mobile users with their activation codes.
• ManagerTraversal: Displays the manager details of the approver and requester in the work item details.
• startupWithBrandLogo: Allows the user to specify custom account logo (the account's branding image) to appear instead of the default CA logo. If this key-value is set to true, but for some reason the brand logo field has an empty or invalid url, the launch screen will remain blank at startup. The CA logo always appears when the app is first launched after installation. This additional property is part of an account's data, and no account data is available on first launch.
  Note: These changes will be reflected on a subsequent launch only after successfully communicating with the CA Identity Manager Server.

You have to add the following Key-Value Pair in the Additional Properties tab on the CA Identity Manager mobile configuration to disable those features in the mobile client.

• To enable or disable the Demo Mode feature

  Set DemoMode to equal Enable or Disable

  • demoMode="Disable/Enable"
• To enable or disable the maxPinRetries feature

  Set maxPinRetries to equal any positive numerical value

  • maxPinRetries=<equal any positive numerical value> Note that the default number of failed attempts is 5.
• To enable or disable the multi-account feature

  Set MultiAccount to equal Enable or Disable

  • multiAccount="Disable/Enable"
• To enable or disable the Manager Traversal feature

  Set ManagerTraversal to equal Enable or Disable

  • managerTraversal="Disable/Enable"
• To enable or disable the startupWithBrandLogo feature

  Set startupWithBrandLogo to true or false

  • startupWithBrandLogo="true/false"

Follow these steps:

1. Log into the CA Identity Manager User Console as an administrator (superuser).
2. Click Tasks, System, Mobile Configuration, Create Mobile Configuration.
3. On the Additional Properties tab, specify additional property key-value pairs to support new functionality in the mobile app.
   • demoMode="Disable/Enable"
   • maxPinRetries=<any positive numerical value> The default number of failed attempts is 5.
   • multiAccount="Disable/Enable"
   • managerTraversal="Disable/Enable"
   • startupWithBrandLogo="true/false"