Managing Samsung SAFE Devices

Samsung for Enterprise (SAFE) offers enhanced device-level security and management capabilities for Android devices. Managing these SAFE devices in Avalanche is established through the use of Samsung-specific APIs and allows you to push software payloads, manage devices, and take advantage of SAFE-specific features.

Samsung SAFE devices follow the same enrollment as Android devices, with the addition of a EULA agreement. Declining the EULA will prevent the device from synchronizing with the smart device server. For information about connecting Android devices, see Connecting Android Devices.

Once you connect a SAFE device, managing it entails the same processes as all other Android devices, with the exception of handling Microsoft Exchange ActiveSync payloads. SAFE devices use a specialized Microsoft Exchange ActiveSync payload. This enables the use of push synchronization for email, contacts, and calendar items to SAFE devices. For more information, see Exchange / ActiveSync Payload.

Apps and how they interact with your Samsung SAFE device can be managed through the Restrictions payload. You can prevent apps from accessing files or contacts, sending text messages, and even installing on the device. For more information, see Restrictions Payload.

You can also manage what areas of your network a Samsung SAFE device can access by configuring firewall rules, inbound and outbound exceptions, and URL filtering. For more information, see Network Restrictions Payload (Samsung SAFE).

Enrolling a Samsung SAFE device can only be performed with Android 4.2 and newer.