8 posts tagged with "Mobile"

Open the XFA desktop or mobile app, enter your work email and confirm it with a one-time code. XFA then shows the organizations you can connect to, so you can get started without asking an administrator to send a separate invitation.

Administrators decide whether their organization allows this through self invite in Awareness settings, where the feature is marked Beta. Connect from the XFA app

Three new dashboard surfaces this week, and a new device check.

A guided way to secure your company

The new Getting Started page helps you get more out of XFA. It lays out four tracked steps, from discovering every device to staying secure and compliant, so you always know what to set up next.

See where Discovery, Awareness and Enforcement stand

The Devices page now opens with a card for Discovery, Awareness and Enforcement, so you can see at a glance where your organization stands. Each card says whether that pillar is running or waiting on you, with the number behind it: devices discovered, alerts sent, successful sign ins. See the Devices overview

Statistics trends, rebuilt and out of BETA

Trends are now a single card: four tiles act as tabs above one chart, with the period, the operating system filter and the chart type on the card instead of in a fullscreen modal. Custom date ranges are supported, and the BETA labels are gone.

Unattended remote access, visible on the device

The device detail view now reports whether a device allows unattended remote access, and explains what the check looks for. You can act on it in your policy; XFA does not change the setting on the device. See your device policy

This week strengthens what XFA checks on mobile devices at sign-in, and makes the dashboard feel lighter and more responsive.

Mobile devices bring more to the sign-in check

The checks that flag a jailbroken, rooted or developer-mode device, or one that was just rebooted, already ran in the XFA app and showed in your dashboard. They now also reach the access decision at sign-in for mobile devices, so a risky mobile device is warned or blocked at login per your policy, the same way it already is on desktop. Nothing new is installed: the mobile app simply reports these signals when it verifies the device at sign-in. See your device policy

The XFA app now shows only the security checks that your organization requires, instead of displaying all available checks.

Each organization configures its own policy with specific security requirements. The app now dynamically matches these requirements and shows you exactly which checks apply to you:

• Policy-scoped checks — Only checks defined in your organization's policy are evaluated and displayed.
• Clear status per check — Each check shows whether your device passes, needs attention, or is blocked.
• Not required checks — Checks that don't apply to your organization are marked as "Not required" so you always know what matters.

This makes it much easier to understand what your organization expects from your device and how to stay compliant.

MFA approval is now easier with push notifications on mobile.

When signing in to an application that requires MFA approval, you will now receive a push notification on your mobile device.

What's New

• Push notifications for MFA - Receive instant notifications on your phone when a sign-in attempt requires approval
• Quick access - Tap the notification to automatically open the XFA app with the trust modal ready

Make sure notifications are enabled for the XFA app on your device to take advantage of this feature.

New security check: Device restart verification

We've introduced a new security feature that verifies if a device has been restarted recently. This check helps ensure that the device is in a clean state and hasn't been compromised.

Why this matters:

• Clear potential malware and exploits
• Complete security updates and patches
• Reset network connections to prevent unauthorized access
• Eliminate memory leaks that could lead to vulnerabilities

You can now enforce users to restart their device if it detects that the device hasn't been restarted for an extended period, helping maintain optimal security conditions. Do you want to know more about why you should enforce this check? Check out our blog post.

🔐 Biometric authentication now mandatory

To enhance security, XFA now makes it possible to require biometric authentication (fingerprint or face recognition) for all sensitive operations. This ensures that only authorized users can access protected features.

Key changes:

• Enforce biometric authentication for all sensitive operations
• Support for both fingerprint and face recognition
• Seamless integration with device security features

This mandatory biometric authentication adds an extra layer of security to ensure that only the rightful owner of the device can access sensitive information and perform critical operations.

Go to the policies page to enable this feature.

📱 XFA now identifies if your mobile phone is rooted or jailbroken.

To ensure the security and integrity of our application, we now check if a mobile device is rooted, jailbroken, or has developer mode enabled.

These checks are important because:

• Rooted or jailbroken devices remove built-in security restrictions, making them more vulnerable to malware, data breaches, and unauthorized modifications.
• Developer mode can expose sensitive debug information and enable actions that bypass security mechanisms.