Secure and manage Dynamics 365 for phones and tablets

Article
01/22/2018

You can secure and manage Dynamics 365 for phones and Dynamics 365 for tablets with the following technologies:

Intune. You can use Intune to manage Dynamics 365 for phones and Dynamics 365 for tablets on Apple and Android tablets and phones. Intune provides mobile device management, mobile application management, and PC management capabilities from the cloud. Using Intune, you can provide your users with access to corporate applications, data, and resources from virtually anywhere on almost any device, while helping to keep corporate information secure.

Important

This feature was introduced in CRM Online 2016 Update.
Dynamics 365 for Good. Dynamics 365 for Good, integrated with Good Dynamics, protects your Customer Engagement data even if your users lose or leave their mobile devices somewhere. For example, if someone leaves their device in a taxi cab and can’t get it back right away, Customer Engagement data is protected by Good encryption. If someone loses their device entirely, all they have to do is notify you so you can remotely wipe Dynamics 365 for Good data from their device.

Important

This feature was introduced in CRM Online 2016 Update.

Manage Dynamics 365 apps on mobile devices with Intune

If your organization is set up with Intune, you can use it to manage the Customer Engagement for phones and tablets apps on Apple, Android, and Windows 10 tablets and phones. Intune manages encryption at the device level, as well as app-to-app communications. With Intune, you can selectively wipe managed apps and related data on devices that are unenrolled, no longer compliant, lost, stolen, or retired from use.

With CRM Online 2016 Update 1, you can use Intune mobile application management (MAM) to manage Customer Engagement mobile applications for Apple and Android without enrolling the device. This protects company data in Customer Engagement without requiring you to enroll and deeply manage the end user's entire device. This is particularly useful for bring-your-own-device (BYOD) scenarios where end users don’t want to or can’t enroll their devices for IT management. This capability is also useful if a device is already enrolled in another mobile application management solution.

More information

For more information about getting and using Intune, see:

Set up conditional access to Dynamics 365 apps

You can use System Center Configuration Manager conditional access to manage access to Customer Engagement from mobile devices based on conditions you specify. For more information about setting up conditional access, see Conditional Access in Configuration Manager.

Note

To use conditional access, you must have an Azure Active Directory premium subscription.

Important

This feature was introduced in CRM Online 2016 Update 1 and CRM 2016 Service Pack 1 (on-premises).

Secure Customer Engagement on mobile devices with Dynamics 365 for Good

Dynamics 365 for Good is a special version of Dynamics 365 for tablets that works with the Good Technology mobile security platform. Dynamics 365 for Good is currently supported for Apple iPad and Apple iPhone running iOS 7 or later. To use Dynamics 365 for Good, you must have Good Dynamics server software and services from Good Technology.

Prepare to use Dynamics 365 for Good

Your organization should have services set up with Good Technology. Then follow the common directions for configuring Dynamics 365 for tablets in Set up Dynamics 365 for phones and Dynamics 365 for tablets.

In addition, the Good Dynamics admin should do the following:

Within the Good Control server, authorize the Dynamics 365 for Good app for mobile users.
Within the Good Control server, add connection URLs to the allowed list. Any domain that the app needs to access for connection or content must be in the Allowed Domains list.

If you're using an on-premises deployment, see Configure a Microsoft Dynamics 365 apps Internet-facing deployment.
Send users the email address and access key they will need to set up the app, or set up another secured application to act as an authentication delegate.

What users need to do

Users should update to the latest version of the Dynamics 365 for Good application. On the Apple App store, the latest version is 1.1. On the Good Dynamics Marketplace or Good Control Console, the latest version is listed as 1.1.0.

Direct your users to Secure your mobile data with Microsoft Dynamics 365 apps for Good

Install Dynamics 365 for Good

The app is listed in the Good Dynamics Marketplace and can be downloaded from the Apple App Store.

Supported languages for Dynamics 365 for Good

Dynamics 365 for Good supports the same languages as Dynamics 365 for tablets. However, when users are viewing Good Dynamics pages, only the following languages are supported:

Dutch - 1043
English - 1033
French - 1036
German - 1031
Italian - 1040
Spanish - 3082

While viewing Good Dynamics pages, if you’re not using one of the languages listed, the screens will be in English.

Things to know about Dynamics 365 for Good

Requires Dynamics CRM 2015 or later. Connecting to earlier versions is not a supported secure configuration.
The Dynamics 365 for Good Apple app requires Dynamics CRM Online 2015 Update 1 when running on an iPhone.
There are multiple policies Good Dynamics administrators set to control data sharing between apps on the mobile device.
1. Prevent click-to-call: Prevents users from initiating a phone call from within the Dynamics 365 for Good app.
2. Prevent click for mapping: Prevents users from opening an address in the mobile device's native maps application.
3. Prevent opening OneNote: Prevents users from opening OneNote notebooks from external sources from within the Dynamics 365 for Good app.
4. Prevent opening Word: Prevents users from opening Word files from external sources within the Dynamics 365 for Good app.
5. Prevent opening Excel: Prevents users from opening Excel files from external sources from within the Dynamics 365 for Good app.
6. Prevent opening PowerPoint: Prevents users from opening PowerPoint files from external sources from within the Dynamics 365 for Good app.
7. Require a secure browser for opening URLs: Enable to ensure browser windows launched from the Dynamics 365 for Good app use a secure browser application.
Important

The policies for preventing opening OneNote, Word, Excel, and PowerPoint files block opening these files on external sources such as SharePoint, OneDrive for Business, and Microsoft 365 Groups. These policies don’t apply to items attached to notes in Customer Engagement or when exporting to Excel, Excel templates, and Word templates. These files download to Good-compliant encrypted file stores and require a Good-compliant application for viewing.
Enable the Prevent Data Leakage setting in the Security Policies tab to cover other situations including using a secure app for email, and handling of copy/paste scenarios.
All data stored on the client when using Dynamics 365 for Good is encrypted using Good Dynamics APIs.
Remote wipe is available and will not affect non-secured apps leaving personal apps and information untouched.
Contact Good Technology regarding the specific support that can be provided with your suite/pricing, as well as the correct server setup for your needs and situation.