Enterprise Mobility + Security

Enterprise Mobility + Security
Name	Enterprise Mobility + Security
Developer	Microsoft Corporation
Released	2014
Latest release	2020s
Operating system	Windows Server; Microsoft Azure; Microsoft 365 ecosystems
License	Proprietary; subscription
Website	Microsoft product pages

Enterprise Mobility + Security

Enterprise Mobility + Security is a suite of identity, device, application, and information protection technologies developed by Microsoft Corporation, intended to secure mobile access and management across corporate environments. It integrates with Microsoft Azure, Microsoft 365, Windows Server 2016, and enterprise products from vendors such as VMware, Inc., Citrix Systems, IBM, and Cisco Systems. The product line overlaps with services and standards from organizations like Internet Engineering Task Force, National Institute of Standards and Technology, European Union Agency for Cybersecurity, and industry initiatives such as FIDO Alliance and OpenID Foundation.

Overview

Enterprise Mobility + Security consolidated Microsoft offerings including identity and access management, mobile device management, mobile application management, and information protection into a single subscription portfolio. It draws on technologies and protocols promoted by OAuth 2.0, SAML 2.0, Kerberos (protocol), and Active Directory Federation Services, and competes with suites from Okta, Inc., Google Workspace, Amazon Web Services, and ServiceNow. The suite targets regulated sectors familiar with frameworks like HIPAA, GDPR, SOX, and standards referenced by ISO/IEC 27001 and PCI DSS.

Components and Features

Core components include identity services, device management, application protection, and information protection. Identity capabilities are centered on Azure Active Directory and integrate conditional access policies inspired by work from Forrester Research and Gartner, Inc.; device management uses technologies aligned with Microsoft Intune and interoperates with System Center Configuration Manager and third-party mobility management from MobileIron and BlackBerry Limited. Application protection features link to enterprise-grade controls found in Microsoft Office 365 and SharePoint Server, while information protection leverages Azure Information Protection and encryption schemas similar to those used by OpenSSL Project and Transport Layer Security. Threat detection and response rely on telemetry compatible with Microsoft Defender platforms and threat intelligence from sources like FireEye, Palo Alto Networks, and Symantec Corporation.

Architecture and Integration

The architecture is cloud-centric with on-premises connectors, hybrid identity federation, and APIs for integration. It uses identity federation with Active Directory and Azure Active Directory Connect, supports single sign-on with providers such as Okta and Ping Identity, and exposes REST APIs for integration with platforms like Salesforce, ServiceNow, and Workday. Device management agents and MDM enrollments support Android (operating system), iOS, macOS, and Windows 10, while backend services are hosted on Microsoft Azure regions and align with compliance controls from SOC 2 and audit schemes used by Deloitte and KPMG. Integration patterns follow guidance similar to TOGAF and reference architectures advocated by NIST SP 800-53.

Licensing and Editions

Licensing historically bundled capabilities into tiers and enterprise plans that parallel Microsoft licensing programs such as Microsoft Enterprise Agreement and Microsoft Volume Licensing. Editions have aligned with suites like Microsoft 365 E3 and Microsoft 365 E5, with SKU references in documentation alongside procurement channels used by Amazon Web Services Marketplace partners and resellers certified through Microsoft Partner Network. Commercial, education, and government licensing models reflect rules comparable to GSA Schedule and procurement practices used by European Commission institutions.

Security and Compliance

Security features include multifactor authentication, conditional access, device compliance checks, application protection policies, information rights management, and data loss prevention. Authentication and credential management follow standards advocated by FIDO Alliance and NIST Digital Identity Guidelines; conditional access models implement zero trust principles championed by analysts at Gartner, Inc. and institutes like Forrester Research. Compliance attestation aligns with ISO/IEC 27001, FedRAMP, and HIPAA controls; audit and reporting integrate with governance, risk, and compliance solutions used by firms including Ernst & Young and PricewaterhouseCoopers.

Deployment and Management

Deployment options span cloud-native, hybrid, and on-premises connectors. Management consoles integrate with the Microsoft Endpoint Manager portal, tie into System Center Configuration Manager workflows, and support automation via PowerShell and Microsoft Graph API. Administrators often follow operational playbooks and runbooks informed by vendors such as Red Hat and consultancies like Accenture and Capgemini for migrations and integration with identity providers like Akamai Technologies and Cloudflare, Inc..

History and Market Reception

The offering evolved from separate Microsoft products in the mid-2010s into a unified suite as enterprises adopted cloud-first strategies advocated by Satya Nadella and reported on by publications such as The Wall Street Journal, The New York Times, and Wired (magazine). Analysts at Gartner, Inc. and Forrester Research assessed the suite against competitors including Okta, Inc., VMware Workspace ONE, and IBM MaaS360, noting strengths in integration with Windows and Office ecosystems but criticism in areas of complexity and licensing. Large adopters have included organizations in finance and healthcare that comply with PCI DSS and HIPAA, while academic institutions referenced implementations in reports from EDUCAUSE.

Category:Microsoft software