SafeNet MobilePASS+ SDK
Product Description
SafeNet MobilePASS+ SDK is a mobile application library. It allows you to create applications that can be used to securely access corporate and web-based resources. SafeNet MobilePASS+ SDK is a cost-effective way for businesses to build applications that can leverage the security of one-time passwords (OTP) using mobile phones. These applications can include functions such as one-time password (OTP) management, challenge-response, data protection, and simplified login using out-of-band (OOB) communication. SafeNet MobilePASS+ SDK uses the user’s mobile device as the security platform. Associated with SafeNet Trusted Access (STA), the SafeNet MobilePASS+ SDK library is a perfect combination of security and convenience. Push OTP functionality is also included in this library, but currently it is not fully supported.
See also SafeNet MobilePASS+ for Android and SafeNet MobilePASS+ for iOS.
SDK for Android
03/14/2023
This release of SafeNet MobilePASS+ SDK for Android 2.2.0 includes updates to the White label application and maintains feature parity with the MobilePASS+ application, and resolves the issues listed below:
-
Third-party authenticator support with MobilePASS+: Allows users to enroll third-party authenticators for different web applications, to protect their personal and professional accounts. See the documentation for details.
-
Improved logging: Enhanced logging and error codes in MobilePASS+ for better troubleshooting and investigation.
-
Overall security and performance enhancements
Some elements in the white label application might refer to MobilePASS+. Please customize these references according to your requirements.
Resolved Issues
| Issue | Synopsis |
|---|---|
| SASMOB-5297 | TLS check now works correctly for different servers. |
| SASMOB-5341 | Resolves app crashes if token activation data contains plain text protocol. |
| SASMOB-5469 | The sample app works correctly when push is disabled at the system level for SAS PCE instances. |
04/08/2022
This release of SafeNet MobilePASS+ SDK for Android v2.1.1 resolves the following issue:
| Issue | Synopsis |
|---|---|
| SASMOB-4549 | Tokens correctly migrate when SDK for Android is upgraded directly from v2.0.1 to v2.1.1. |
Tokens do not migrate correctly if SDK for Android v2.0.1 is first upgraded to v2.1 and then from v2.1 to v2.1.1.
01/19/2022
This release of SafeNet MobilePASS+ SDK for Android introduces the following features:
-
White Label Application - This application comes branded as a Thales application but includes customization guides to easily change and brand this application to your own needs. This app is fully themeable and provides functionality similar to the MobilePass+ application, except for Push which is not yet fully supported.
-
Updates to the biometrics and risk detection APIs
08/18/2021
This release of SafeNet MobilePASS+ SDK for Android introduces the following features:
-
Updates to the biometrics and push APIs
-
RiskManager - Gathers and sends risk data that is used by the server to track statistics about the device and whether or not tokens are running in a safe environment. This feature is up to users of the app to call. Users can send data at their own discretion.
-
TokenData - RequiresBiometricReenabling signals whether biometrics must be re-enabled after being unlocked.
-
Biometric Errors - BioAuthDataResult and EnableBiometricResult are updated to consider device biometric errors. These occur while creating and using biometric authentication data. Some devices will throw an error due to internal issues with the device biometrics. This error is now passed up to the user.
-
TokenManager - retrieveLogs allows SDK users to get the enrollment logs for a given token. These logs can be sent to support for help with enrollment issues.
-
ActivationErrors - Reports errors that can occur when the token fails to register with MSM and when TLS fails its safety check.
-
MPPStatus - Updated error codes.
-
MPPPinValidator - Checks whether the PIN or passcode is valid, depending on complexity and a given range of lengths.
-
MPPRiskDetectionDetails - Provides the necessary details for risk detection.
-
MPPRiskDetectionTask - The entry point for risk detection. An MPPRiskDetectionDetails object is required to pass information to the risk detection task. The information provided by the risk detection details will be sent to STA.
-
MPPToken
-
isPushNotificationSupported - Checks if push notifications are available for use with a specific token.
-
changeTokenAlias - Changes the alias associated with the token to the given value.
-
getLog - Retrieves the URL of the token activation log.
-
-
MPPTokenActivationTask
-
MPPInsecureDisposition - Used to either cancel or proceed with the activation task given an insecure connection.
-
MPPPushDeviceTokenRequestCallback - Allows the application to provide the SDK with the iOS push device token.
-
MPPPinCallback - Allows the application to provide the SDK with the PIN requested during token activation.
BETA releases of operating systems are not supported.
-
SDK for iOS
01/19/2022
This release of SafeNet MobilePASS+ SDK for iOS v2.1 introduces the following features:
-
White Label Application - This application comes branded as a Thales application but includes customization guides to easily change and brand this application to your own needs. This app is fully themeable and provides functionality similar to the MobilePass+ application, except for Push which is not yet fully supported.
-
Updates to the biometrics and risk detection APIs
08/18/2021
This release of SafeNet MobilePASS+ SDK for iOS v2.0.2 introduces the following features:
-
Updates to the biometrics and push APIs
-
RiskManager - Gathers and sends risk data that is used by the server to track statistics about the device and whether or not tokens are running in a safe environment. This feature is up to users of the app to call. Users can send data at their own discretion.
-
TokenData - RequiresBiometricReenabling signals whether biometrics must be re-enabled after being unlocked.
-
Biometric Errors - BioAuthDataResult and EnableBiometricResult are updated to consider device biometric errors. These occur while creating and using biometric authentication data. Some devices will throw an error due to internal issues with the device biometrics. This error is now passed up to the user.
-
TokenManager - retrieveLogs allows SDK users to get the enrollment logs for a given token. These logs can be sent to support for help with enrollment issues.
-
ActivationErrors - Reports errors that can occur when the token fails to register with MSM and when TLS fails its safety check.
-
MPPStatus - Updated error codes.
-
MPPPinValidator - Checks whether the PIN or passcode is valid, depending on complexity and a given range of lengths.
-
MPPRiskDetectionDetails - Provides the necessary details for risk detection.
-
MPPRiskDetectionTask - The entry point for risk detection. An MPPRiskDetectionDetails object is required to pass information to the risk detection task. The information provided by the risk detection details will be sent to STA.
-
MPPToken
-
isPushNotificationSupported - Checks if push notifications are available for use with a specific token.
-
changeTokenAlias - Changes the alias associated with the token to the given value.
-
getLog - Retrieves the URL of the token activation log.
-
-
MPPTokenActivationTask
-
MPPInsecureDisposition - Used to either cancel or proceed with the activation task given an insecure connection.
-
MPPPushDeviceTokenRequestCallback - Allows the application to provide the SDK with the iOS push device token.
-
MPPPinCallback - Allows the application to provide the SDK with the PIN requested during token activation.
BETA releases of operating systems are not supported.
-
SDK for Windows
04/27/2023
This release of SafeNet MobilePASS+ SDK for Windows 2.2.0 includes updates to the white label application and maintains feature parity with the MobilePASS+ application.
-
Improved logging: Enhanced logging and error codes in MobilePASS+ for better troubleshooting and investigation.
-
Overall security and performance enhancements
09/02/2021
This release of SafeNet MobilePASS+ SDK for Windows v2.0.3 introduces the following features and resolves the issue listed below:
-
Token sharing between all the users in windows 10 machine
-
Threat detection using Windows Environment Detection Library (WEDL)
-
Push authentication history
-
Authenticator Name is restricted to 32 char’s length
-
White Label Application:
-
Queued push notifications support
-
UI updates for Authenticator list and Push dialog
SafeNet MobilePASS+ SDK for Windows VDI Environment is not supported for Store application and EXE/ MSI installer for single user.
-
Resolved Issue
| Issue | Synopsis |
|---|---|
| MWS-18/21 | MobilePASS+ launches correctly for domain user names that contain special characters (for example, ë). |
Package Contents
| Category | Description |
|---|---|
| Programmer Documentation |
|
| Security |
|
| API Documentation |
|
| Sample Application |
|
| SDK |
|
| White Label Application |
|
Operating System Compatibility
| Product | Operating System |
|---|---|
| SDK for Android |
|
| White Label App for Android |
|
| SDK for iOS |
|
| White Label App for iOS |
|
| SDK for Windows |
|
BETA releases of operating systems are not supported.
Known Issues
SDK for Android
| Issue | Synopsis |
|---|---|
| SASMOB-4142 | Unlimited attempt tokens only allow 255 attempts. |
SDK for Android and iOS
| Issue | Synopsis |
|---|---|
| N/A | Server PINs that are complex alphanumeric are treated as strong alphanumeric. |
SDK for iOS
| Issue | Synopsis |
|---|---|
| SASMOB-2287 | Uninstalling and reinstalling the SafeNet MobilePASS+ SDK app retains tokens, but the tokens are invalid when another app of the same app group exists. |
White Label App for iOS
| Issue | Synopsis |
|---|---|
| SASMOB-4475 | Enrollment stalls on activation page if URL is unreachable. |
| SASMOB-4196 | OTP not generated when biometrics get locked after 4 consecutive FaceID failures. |
| SASMOB-4195 | Biometrics authentication not enabled after configuring FaceID. |
| SASMOB-4159 | App crashes when in background during enrollment of Server PIN token. |
| SASMOB-2784 | The challenge code dialog displays twice. |
SDK for Windows
| Issue | Synopsis |
|---|---|
| MPPAPPW-2962 | Summary: When Enhanced Workflow Approval is off and concurrent push requests for one userID are sent, the second request fails. Workaround: None. |
| MPPAPPW-2676 | Summary: The time displayed on push dialogs is not always synchronized with the server time. Workaround: None. |