Custom Authentication in SureLock: Why add an extra layer of security

Frontline workers are key to the success of their businesses. So, businesses must ensure that their frontline employees are armed with all the tools and technologies they need to be efficient. However, this usually requires a huge investment. As such, companies often use a shared pool of devices to enable their frontline workers, allowing multiple workers to use the same device during different time periods. This helps businesses cut down mobile hardware costs. However, enabling device sharing calls for both multi-user support and custom authentication. Since different employees may need different apps and settings on the device to work with, device sharing can jeopardize data security if not done correctly. Thankfully,  SureLock can help.

What is a Multi-User Profile in SureLock Android?

Android devices support multiple user profiles. Businesses using Android devices for work can create multiple user profiles on a single Android device. Each of these profiles can be configured with the necessary apps, data, and enterprise settings tailored to their use cases. 

Therefore, this feature not only helps multiple workers use shared devices for work but also allows businesses to reduce their mobile hardware costs. Moreover, multi-user profiles ensure that frontline workers can securely log in to their respective accounts on shared devices whenever required.

How Does SureLock Support User Authentication?

Out of the box, SureLock supports password auth and LDAP auth. However, these two authentication methods may not be sufficient for several organizations. To overcome the limitation, SureLock offers an authentication plugin where a custom authentication mechanism can be integrated with SureLock, depending upon the business use case. This custom plugin can be implemented as an independent Android Application. Additionally, 42Gears can help businesses develop this custom plugin. The custom authentication plugin communicates with a business’s authentication server to produce custom signed tokens when a user successfully signs in. As a result, any device will be ready to use for business operations. Users can sign in to their respective business account from anywhere from any device. This means they do not necessarily need a dedicated device to work on. 

For instance, a banking institution may set up its own authentication server and leverage the custom authentication plugin to allow its employees in the field to log in to any device. The employee may use the plugin to securely transfer files to the servers in the bank. 

Use Cases of Multi-User Profile Mode and Custom Authentication

SureLock multi-user profile mode has many use cases in different industries.

Logistics

In the logistics industry, businesses can benefit from using a multi-user profile in SureLock. 

For instance, in a typical warehouse scenario, at the beginning of every shift, every employee can randomly pick up one device from a pool of devices and enter the warehouse. He can log into his profile using custom authentication. Depending upon his profile, he can get access to all the apps and settings necessary to perform his duties. The custom authentication will verify the identity of the employee attempting to gain access to their business account. Once the shift is over, the employee can log out of his profile and put the device back into the cradle. Hence, the device becomes available for the next employee to use, and two employees can do their jobs using a shared device. This can save businesses thousands of dollars because they do not need to purchase as much mobile hardware.

Transportation

In the transportation sector, where drivers work in shifts, multi-user profiles can help admins configure unique profiles associated with each driver. This will allow admins to track each user via their individual profiles, each containing an independent activity history. Moreover, by defining the entire kiosk lockdown configuration on a driver-by-driver basis, admins can prevent device misuse and data leakage between shared devices.

Retail

On a shop floor, where every sales rep is equipped with a device, SureLock multi-user profile mode can play a vital role. For instance, this feature can help retail giants create a pool of shared devices for employees. This allows employees to randomly pick up any device from the inventory and log into their profiles. Custom authentication can allow secure access into their respective accounts. Consequently, on successfully logging in, the pre-configured user profile will load. Now, the admin can pre-configure or customize every user’s profile with a different set of applications, data, and settings based on the individual’s job profile. For instance, the profile of the sales rep in a store’s kids section will be different from that of the person managing inventory.

Conclusion

The use of shared devices via multi-user profiles is broadly applicable across all kinds of industries including construction, healthcare, education, banking and more. Frontline workers, even those in remote locations, can be productive right away with the use of SureLock multi-user profiles. This feature allows workers to quickly start using devices once they log in, by authenticating their profiles through the LDAP server.