How to Use Trusted App Groups with Copy Paste Prevention

Appdome’s Copy-Paste Prevention replaces standard EMM-based copy-paste protections. Appdome’s Copy-Paste Prevention allows organizations to create trusted app groups with copy-paste prevention controlled by the EMM’s DLP policy to more apps.

This Knowledge Base article provides step-by-step instructions for using Appdome to Extend EMM Copy-Paste Prevention to trusted mobile apps and control the copy-paste policies via an EMM’s DLP Policy.

We hope you find this knowledge base useful and enjoy using Appdome!

How to Use Trusted App Groups with Copy Paste Prevention

Appdome is a no-code mobile app security platform designed to add security features in mobile apps.

Appdome’s no-code mobile app security platform offers mobile developers, DevSec and security professionals a convenient and reliable way to protect Android and iOS apps without coding. When a user clicks “Build My App,” Appdome leverages a microservice architecture filled with 1000s of security plugins, and an adaptive code generation engine that matches the correct required plugins to the development environment, frameworks, and methods in each app.

Using Appdome, there are no development or coding prerequisites to build secured apps. There is no SDK and no library to manually code or implement in the app. The Appdome technology adds the relevant standards, frameworks, stores, and logic to the app automatically, with no manual development work at all.

Likewise, there are no required infrastructure changes or configuration changes required inside the app. The Appdome technology adds any EMM SDK and relevant standards, frameworks, configurations and more to the app automatically, with no manual development work at all. The monitoring of the clipboard access from the app’s code including its libraries would ordinarily require a developer to implement. Using Appdome, mobile apps will adhere to EMM security policies as if the EMM SDK and Copy-Paste Prevention were natively coded to the app.

By default, mobile app users are normally able to copy and paste information from one app to another. However, mobile app use inside organizations may contain confidential or sensitive information. As such, EMMs have copy-paste policies enforced by their SDKs to limit copy and paste capabilities. Most EMMs either block copy-paste altogether or allow copy-paste between specific apps only. Appdome’s enhanced copy-paste prevention allows organizations to create specific mobile apps trust groups to extend copy-paste functions between more apps. Using Appdome’s enhanced copy-paste prevention, Appdome encrypts the mobile app clipboard and decrypts it if two conditions are met (a) the app is in DLP policy’s authorized apps, and (b) that mobile app is in the trust group created on Appdome (i.e., Appdome-built apps created in the same Appdome Account or Team). Trying to copy-paste protected data from apps outside the DLP policy or into non-authorized apps will result in a message telling the user that the data he tried to paste is protected.

Prerequisites for using Copy/Paste Prevention

In order to use Appdome’s no code implementation of Copy/Paste Prevention on Appdome, you’ll need:

• Appdome account
• Mobile App (.ipa for iOS, or .apk or .aab for Android)
• One of the supported EMM accounts, Intune, VMWare Workspace ONE (AirWatch), or BlackBerry Good
• DLP policy that supports Copy/Paste Prevention. For example:
  • Microsoft Intune DLP configuration instructions can be found here
  • BlackBerry Dynamics DLP configuration instructions can be found here
• Signing Credentials (e.g., signing certificates and provisioning profile)

The Easy Steps to Use Trusted App Groups with Copy Paste Prevention

Follow these step-by-step instructions to add Copy/Paste Prevention by Appdome to a Mobile App:

Upload a Mobile App to Your Account

Please follow these steps to add a mobile app to your Appdome account.
If you don’t have an Appdome account, click here to create an account.

From the “Build” tab, Add Copy/Paste Prevention

Appdome adds Copy/Paste Prevention to all apps built with an EMM service. The feature will take effect at runtime according to the EMM’s DLP policy.

Select the Build Tab. Note: a blue underline will appear showing the step is active

Beneath the Build Tab, you will find several service options. Select Management. Note: a blue highlight will appear showing the category is active.

1. Click the EMM Services toggle to the right to enable integration with an Enterprise Mobility Management service. A list of available EMM providers will appear.
2. Choose your desired EMM service from the list
3. For Microsoft Intune, Appdome will default to Copy-Paste Prevention by Appdome (shown below).
4. For all other EMM Vendors, users can toggle “ON” Copy-Paste Prevention by Appdome.
5. Click Build My App.