---
schema_version: "1"
id: 37ce278f321cf851177d80e8f1476565cddf659ab93c8ce62f674a86273e36cd
title: Enhanced Mobile App Security Policies for Mobile Publisher
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/branded_apps_exp_enhanced_mobile_security_policies.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.branded_apps_exp_enhanced_mobile_security_policies.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 9dee14057a846d9b66b547b4c56eec010b92b9923037b5d7d6d92292e327b62d
description: Review the security policies and severity levels that are supported on Mobile Publisher for Experience Cloud apps.
products:
  - Experiences
  - Mobile App
  - Cross Cloud
release: "264"
---
# Enhanced Mobile App Security Policies for Mobile Publisher

Review the security policies and severity levels that are supported on Mobile Publisher for Experience Cloud apps.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions</td></tr></tbody></table>

For each security policy that you activate, you set a level. Each severity level represents the action that your app automatically takes when the security policy is violated.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_note.png)

Note In Setup for Mobile Publisher, you can customize the colors and fonts of the app screens associated with each policy and level. However, the text within the alerts isn't customizable. Also, Android app builds with Enhanced Security enabled fail if you have also enabled Automatic Protection in the Google Play Console environment.

 
| Severity Level | Actions Enforced |
| --- | --- |
| `critical` | Wipes app data and logs user out |
| `error` | Blocks access to the app until the issue is resolved, but doesn’t log user out |
| `warn` | Notifies the user of the violation and recommends how to resolve, but user is able to continue using the app |
| `info` | Blocks prohibited action or logs user action and informs user |

When you enable Enhanced Mobile App Security, you can activate these security policies for your Mobile Publisher for Experience Cloud app.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_note.png)

Note When you enable Enhanced Mobile App Security, you also enable code obfuscation for an Android app and string obfuscation for an iOS app. Code or string obfuscation protects your app from reverse engineering. You don’t need to activate a separate policy in Mobile Security to enable code or string obfuscation.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
      <colgroup>
        <col style="width:33.33333333333333%">
        <col style="width:33.33333333333333%">
        <col style="width:33.33333333333333%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="" id="branded_apps_exp_enhanced_mobile_security_policies__mobile_security_policies_columns">
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d21804e158">Policy Name</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d21804e161">Description</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d21804e164">Severity Level</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Block Jailbroken Device</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">A jailbroken or rooted mobile device can access system files to install unapproved apps
            or to modify settings.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p>Severity:</p>
            <ul>
              <li>
                <code>critical</code>
              </li>

              <li>
                <code>error</code>
              </li>

              <li>
                <code>warn</code>
              </li>

            </ul>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Block Man In The Middle Attack</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">
            <p>A man-in-the-middle attack allows attackers to secretly intercept communications
              between two systems, client and server. </p>
            <p>This policy relies on network connectivity. If a user’s device has low connectivity or the device is in airplane mode without an internet connection, the policy can get triggered.</p>
            <p style="margin-bottom:0;">To use this policy on Android apps, we recommend that your <a href="https://help.salesforce.com/s/articleView?id=xcloud.branded_apps_permissions.htm&amp;release=264.0.0&amp;type=5" title="If your app has features that need access to mobile device capabilities, your app users must explicitly grant access to these capabilities. For example, if your app supports taking photos, then your app must ask for camera permissions. Set up the permissions that your app needs in your Mobile Publisher project.">app requests permission</a> to the device’s coarse and fine locations. The property on Android that detects man-in-the-middle attacks can detect if a user has changed locations or Wi-Fi networks.</p>
          </td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p>Severity:</p>
            <ul>
              <li>
                <code>critical</code>
              </li>

              <li>
                <code>error</code>
              </li>

              <li>
                <code>warn</code>
              </li>

            </ul>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Minimum OS Version</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">Specify the minimum operating system (OS) version your user’s mobile device must
            meet.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p>The number of the minimum OS version.</p>
            <p>Severity:</p>
            <ul>
              <li>
                <code>critical</code>
              </li>

              <li>
                <code>error</code>
              </li>

              <li>
                <code>warn</code>
              </li>

            </ul>
            <p style="margin-bottom:0;">Example: <code>11.9</code></p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Maximum OS Version</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">Specify the maximum operating system (OS) version your user's mobile device can’t
            exceed.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p>Severity:</p>
            <ul>
              <li>
                <code>critical</code>
              </li>

              <li>
                <code>error</code>
              </li>

              <li>
                <code>warn</code>
              </li>

            </ul>
            <p style="margin-bottom:0;">Example: <code>12.1.9</code></p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Log Out User After Changing Biometric Login Data (iOS only)</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">Biometric login uses facial or fingerprint recognition to unlock devices and
            apps.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p style="margin-bottom:0;">Severity: <code>info</code>
            </p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Blocked Device List</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">A device blocklist is a list of devices that a user is blocked from using. Specify
            blocked devices as a semicolon separated list.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p>Severity:</p>
            <ul>
              <li>
                <code>critical</code>
              </li>

              <li>
                <code>error</code>
              </li>

              <li>
                <code>warn</code>
              </li>

            </ul>
            <p>Examples: </p>
            <ul>
              <li><code>iPhone11,8</code> (blocks iPhone XR)</li>

              <li><code>Google</code> (blocks all Google devices)</li>

            </ul>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Allowed Device List</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">A device allowlist is a list of devices that a user can use. Specify allowed devices as
            a semicolon separated list.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p>Severity:</p>
            <ul>
              <li>
                <code>critical</code>
              </li>

              <li>
                <code>error</code>
              </li>

              <li>
                <code>warn</code>
              </li>

            </ul>
            <p>Examples: </p>
            <ul>
              <li><code>iPhone11,8</code> (allows iPhone XR)</li>

            </ul>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Block Contacts (iOS only)</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">Block access to contacts on a user's device.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p style="margin-bottom:0;">Severity: <code>info</code>
            </p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Block Calendar (iOS only)</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">Block calendar access on a user’s device.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p style="margin-bottom:0;">Severity: <code>info</code>
            </p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Minimum Security Patch Version (Android only)</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">A security patch helps protect a user’s mobile device from vulnerabilities. Specify the
            required minimum security patch version.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p>The date of the minimum security patch version.</p>
            <p>Severity:</p>
            <ul>
              <li>
                <code>critical</code>
              </li>

              <li>
                <code>error</code>
              </li>

              <li>
                <code>warn</code>
              </li>

            </ul>
            <p style="margin-bottom:0;">Example: <code>2027-05-18</code></p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Log Out User After Device Restart</td>

          <td data-label="Description" class="slds-cell-wrap" id="branded_apps_exp_enhanced_mobile_security_policies__log_out_user_device_restart_desc" style="vertical-align:top;" headers="d21804e161 ">Specify if you want to log out a user after a
            device restart.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" id="branded_apps_exp_enhanced_mobile_security_policies__log_out_user_device_restart_severity" style="vertical-align:top;" headers="d21804e164 ">
            <p style="margin-bottom:0;">Severity: <code>info</code>
            </p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Maximum Days Offline Without Policy Refresh (Android only)</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e161 ">We perform a security policy refresh when a user opens the app. Specify the maximum
            number of days a user can go without a security policy refresh.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e164 ">
            <p>Severity:</p>
            <ul>
              <li>
                <code>critical</code>
              </li>

              <li>
                <code>error</code>
              </li>

              <li>
                <code>warn</code>
              </li>

            </ul>
            <p style="margin-bottom:0;">Example: <code>30</code></p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d21804e158 ">Log Security Policy Evaluation Result</td>

          <td data-label="Description" class="slds-cell-wrap" id="branded_apps_exp_enhanced_mobile_security_policies__log_security_policy_evaluation_result_desc" style="vertical-align:top;" headers="d21804e161 ">A security policy evaluation assesses
            whether users are meeting security requirements. Log the results of a security policy
            evaluation.</td>

          <td data-label="Severity Level" class="slds-cell-wrap" id="branded_apps_exp_enhanced_mobile_security_policies__log_security_policy_evaluation_result_severity" style="vertical-align:top;" headers="d21804e164 ">
            <p style="margin-bottom:0;">Severity: <code>info</code></p>
          </td>

        </tr>
      </tbody>
    </table>