Device security for ServiceNow Mobile apps

This document applies to current ServiceNow apps for iOS and Android for Zurich. This document may be subject to change for future mobile releases.

• Components and architecture
  The ServiceNow mobile apps consist of the ServiceNow server instance and native apps for iOS and Android. The apps use fully native code and are not a hybrid approach. The mobile client applications communicate over a wireless connection with the server and pull live data for the end user.
• Identity and access management
  Learn about user authentication, third party authentication, and user session termination for mobile applications.
• Mobile data flow for ServiceNow mobile apps
  Data can be retrieved, downloaded from, and written back to a mobile device.
• Internal mobile app distribution
  Internal distribution of ServiceNow mobile apps is supported through all major EMM vendors.
• Data security for ServiceNow mobile apps
  ServiceNow mobile apps use SSL/TLS for Over-the-Air (OTA) communication encryption for data security. The OAuth authorization endpoints are HTTPS.
• Push notifications
  Administrators create push notifications and users are able to receive them.
• Mobile security practices
  Mobile security practices include mobile-specific system properties, attachment control, password reinforcement, security patching, and controlling shared data.
• Edge Encryption for ServiceNow mobile
  Users can view and edit data protected with Edge Encryption within their mobile device. The data appears in readable form on the mobile device but is encrypted in the database.