SafeNet MobilePASS+ SDK
Product Description
SafeNet MobilePASS+ SDK is a desktop/mobile client application enabling you to access corporate and web-based resources securely. It eliminates the need to remember complex passwords. SafeNet MobilePASS+ is a cost-effective way for businesses to leverage the security of One Time Passwords (OTP) using mobile phones, including functions such as one-time password (OTP) management, challenge-responses, transaction data signing, data protection, and out-of-band (OOB) communication. It utilizes the user's mobile device or desktop/laptop as the security platform. Associated with SafeNet Authentication Service, the SafeNet MobilePASS+ application is a perfect combination of security and convenience.
See also SafeNet MobilePASS+ for Android and SafeNet MobilePASS+ for iOS.
SDK for Android
03/14/2023
This release of SafeNet MobilePASS+ SDK for Android 2.2.0 updates the White Label application, maintains feature parity with the SafeNet MobilePASS+ application, and resolves the issues listed below:
-
Third-party authenticator support with SafeNet MobilePASS+: Allows users to enroll third-party authenticators for different web applications, to protect their personal and professional accounts. See the documentation for details.
-
Improved logging: Enhanced logging and error codes in SafeNet MobilePASS+ for better troubleshooting and investigation.
-
Overall security and performance enhancements
Some elements in the white label application might refer to SafeNet MobilePASS+. Please customize these references according to your requirements.
Resolved Issues
Issue | Synopsis |
---|---|
SASMOB-5297 | TLS check now works correctly for different servers. |
SASMOB-5341 | Resolves app crashes if token activation data contains plain text protocol. |
SASMOB-5469 | The sample app works correctly when push is disabled at the system level for STA/SAS instances. |
04/08/2022
This release of SafeNet MobilePASS+ SDK for Android v2.1.1 resolves the following issue:
Issue | Synopsis |
---|---|
SASMOB-4549 | Tokens correctly migrate when SDK for Android is upgraded directly from v2.0.1 to v2.1.1. |
Tokens do not migrate correctly if SDK for Android v2.0.1 is first upgraded to v2.1 and then from v2.1 to v2.1.1.
01/19/2022
This release of SafeNet MobilePASS+ SDK for Android introduces the following features:
-
White Label Application - This application comes branded as a Thales application but includes customization guides to easily change and brand this application to your own needs. This app is fully themeable and provides functionality similar to the MobilePass+ application, except for Push which is not yet fully supported.
-
Updates to the biometrics and risk detection APIs
08/18/2021
This release of SafeNet MobilePASS+ SDK for Android introduces the following features:
-
Updates to the biometrics and push APIs
-
RiskManager - Gathers and sends risk data that is used by the server to track statistics about the device and whether or not tokens are running in a safe environment. This feature is up to users of the app to call. Users can send data at their own discretion.
-
TokenData - RequiresBiometricReenabling signals whether biometrics must be re-enabled after being unlocked.
-
Biometric Errors - BioAuthDataResult and EnableBiometricResult are updated to consider device biometric errors. These occur while creating and using biometric authentication data. Some devices will throw an error due to internal issues with the device biometrics. This error is now passed up to the user.
-
TokenManager - retrieveLogs allows SDK users to get the enrollment logs for a given token. These logs can be sent to support for help with enrollment issues.
-
ActivationErrors - Reports errors that can occur when the token fails to register with MSM and when TLS fails its safety check.
-
MPPStatus - Updated error codes.
-
MPPPinValidator - Checks whether the PIN or passcode is valid, depending on complexity and a given range of lengths.
-
MPPRiskDetectionDetails - Provides the necessary details for risk detection.
-
MPPRiskDetectionTask - The entry point for risk detection. An MPPRiskDetectionDetails object is required to pass information to the risk detection task. The information provided by the risk detection details will be sent to STA.
-
MPPToken
-
isPushNotificationSupported - Checks if push notifications are available for use with a specific token.
-
changeTokenAlias - Changes the alias associated with the token to the given value.
-
getLog - Retrieves the URL of the token activation log.
-
-
MPPTokenActivationTask
-
MPPInsecureDisposition - Used to either cancel or proceed with the activation task given an insecure connection.
-
MPPPushDeviceTokenRequestCallback - Allows the application to provide the SDK with the iOS push device token.
-
MPPPinCallback - Allows the application to provide the SDK with the PIN requested during token activation.
BETA releases of operating systems are not supported.
-
SDK for iOS
09/26/2023
This release of SafeNet MobilePASS+ SDK for iOS v2.2.0 updates the White Label application, maintains feature parity with the SafeNet MobilePASS+ application, introduces the following feature, and resolves the issues listed below:
- Third-party authenticator support with SafeNet MobilePASS+: Allows users to enroll third-party authenticators for different web applications, to protect their personal and professional accounts. See Enroll third-party tokens on iOS for details.
- Overall security and performance enhancements
Resolved Issues
Issue | Synopsis |
---|---|
SASMOB-4196 | OTP is generated when biometrics get locked after four consecutive FaceID failures. |
SASMOB-4195 | Biometrics authentication is enabled after configuring FaceID. |
01/19/2022
This release of SafeNet MobilePASS+ SDK for iOS v2.1 introduces the following features:
-
White Label Application - This application comes branded as a Thales application but includes customization guides to easily change and brand this application to your own needs. This app is fully themeable and provides functionality similar to the SafeNet MobilePass+ application, except for Push which is not yet fully supported.
-
Updates to the biometrics and risk detection APIs
08/18/2021
This release of SafeNet MobilePASS+ SDK for iOS v2.0.2 introduces the following features:
-
Updates to the biometrics and push APIs
-
RiskManager - Gathers and sends risk data that is used by the server to track statistics about the device and whether or not tokens are running in a safe environment. This feature is up to users of the app to call. Users can send data at their own discretion.
-
TokenData - RequiresBiometricReenabling signals whether biometrics must be re-enabled after being unlocked.
-
Biometric Errors - BioAuthDataResult and EnableBiometricResult are updated to consider device biometric errors. These occur while creating and using biometric authentication data. Some devices will throw an error due to internal issues with the device biometrics. This error is now passed up to the user.
-
TokenManager - retrieveLogs allows SDK users to get the enrollment logs for a given token. These logs can be sent to support for help with enrollment issues.
-
ActivationErrors - Reports errors that can occur when the token fails to register with MSM and when TLS fails its safety check.
-
MPPStatus - Updated error codes.
-
MPPPinValidator - Checks whether the PIN or passcode is valid, depending on complexity and a given range of lengths.
-
MPPRiskDetectionDetails - Provides the necessary details for risk detection.
-
MPPRiskDetectionTask - The entry point for risk detection. An MPPRiskDetectionDetails object is required to pass information to the risk detection task. The information provided by the risk detection details will be sent to STA.
-
MPPToken
-
isPushNotificationSupported - Checks if push notifications are available for use with a specific token.
-
changeTokenAlias - Changes the alias associated with the token to the given value.
-
getLog - Retrieves the URL of the token activation log.
-
-
MPPTokenActivationTask
-
MPPInsecureDisposition - Used to either cancel or proceed with the activation task given an insecure connection.
-
MPPPushDeviceTokenRequestCallback - Allows the application to provide the SDK with the iOS push device token.
-
MPPPinCallback - Allows the application to provide the SDK with the PIN requested during token activation.
BETA releases of operating systems are not supported.
-
SDK for Windows
07/03/2023
This release of SafeNet MobilePASS+ SDK for Windows 2.2.1 includes TPM support for the tokens.
04/27/2023
This release of SafeNet MobilePASS+ SDK for Windows 2.2.0 includes updates to the white label application and maintains feature parity with the SafeNet MobilePASS+ application.
-
Improved logging: Enhanced logging and error codes in SafeNet MobilePASS+ for better troubleshooting and investigation.
-
Overall security and performance enhancements
09/02/2021
This release of SafeNet MobilePASS+ SDK for Windows v2.0.3 introduces the following features and resolves the issue listed below:
-
Token sharing between all the users in windows 10 machine
-
Threat detection using Windows Environment Detection Library (WEDL)
-
Push authentication history
-
Authenticator Name is restricted to 32 char’s length
-
White Label Application:
-
Queued push notifications support
-
UI updates for Authenticator list and Push dialog
SafeNet MobilePASS+ SDK for Windows VDI Environment is not supported for Store application and EXE/ MSI installer for single user.
-
Resolved Issue
Issue | Synopsis |
---|---|
MWS-18/21 | SafeNet MobilePASS+ launches correctly for domain user names that contain special characters (for example, ë). |
Package Contents
Category | Description |
---|---|
Programmer Documentation |
|
Security |
|
API Documentation |
|
Sample Application |
|
SDK |
|
White Label Application |
|
Operating System Compatibility
Product | Operating System |
---|---|
SDK for Android |
|
White Label App for Android |
|
SDK for iOS |
|
White Label App for iOS |
|
SDK for Windows |
|
BETA releases of operating systems are not supported.
Limitations
- SafeNet MobilePASS+ SDK version 2.2.1 for Windows VDI Environment is supported only for the shared token feature.
- Tokens integrated with TPM feature is not supported for shared token feature.
- If TPM is cleared after enrolling the tokens, then tokens will not work, and it must be re-enrolled.
Known Issues
SDK for Android
Issue | Synopsis |
---|---|
SASMOB-4142 | Unlimited attempt tokens only allow 255 attempts. |
SDK for Android and iOS
Issue | Synopsis |
---|---|
N/A | Server PINs that are complex alphanumeric are treated as strong alphanumeric. |
SDK for iOS
Issue | Synopsis |
---|---|
SASMOB-5863 | Users who update from iOS 16 to 17 could find that they are no longer able to generate OTPs or enroll new tokens. |
SASMOB-5793 | When users add new biometrics to their device, biometric authentication in MPP is not invalidated. |
SASMOB-2287 | Uninstalling and reinstalling the SafeNet MobilePASS+ SDK app retains tokens, but the tokens are invalid when another app of the same app group exists. |
White Label App for iOS
Issue | Synopsis |
---|---|
SASMOB-5938 | White Label auto unlock can sometimes present two PIN dialogs. |
SASMOB-5127 | White Label app does not validate the base64 content when auto-pasting it from the clipboard. |
SASMOB-4846 | There are some visibility issues when viewing the white label app with large text enabled from system settings. |
SASMOB-4841 | The touch id biometric dialog can repeatedly pop up in some circumstances. |
SASMOB-4475 | Enrollment stalls on activation page if URL is unreachable. |
SASMOB-4159 | App crashes when in background during enrollment of Server PIN token. |
SASMOB-2784 | The challenge code dialog displays twice. |
SDK for Windows
Issue | Synopsis |
---|---|
MPPAPPW-2676 | Summary: The time displayed on push dialogs is not always synchronized with the server time. Workaround: None. |