---
schema_version: "1"
id: c2563df6adb5605b4693c7e322f8762565cbbd398f9f34df115cac7040b4036c
title: Enable and Configure Mobile App Security Policies
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/mobile_security_mam_setup_ui.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.mobile_security_mam_setup_ui.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 3d154cd68ce79fd59c638ce034af5c48e2c2e6d0e188f8f7ffca651ed8d4580c
description: Use the convenient Setup UI to enable, configure, and enforce mobile security policies.
products:
  - Security
  - Mobile App
  - Cross Cloud
release: "264"
---
# Enable and Configure Mobile App Security Policies

Use the convenient Setup UI to enable, configure, and enforce mobile security policies.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d2597e38">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e38 ">To create and modify Enhanced Mobile App Security settings:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e38 ">
              <p>Manage Enhanced Mobile App Security</p>
              <p>AND</p>
              <p style="margin-bottom:0;">Modify Metadata</p>
            </td>

          </tr>
        </tbody>
      </table>

To configure your policies:

1. From Setup, in the Quick Find box, enter Mobile Security, and then select **Mobile Security**.
2. Select **Edit Security Policies** for **iOS** or **Android**.
    
    ![Setup user interface](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mobile_security-264-0-0-production-enus/aa5de880-f40d-4478-acb7-729eee2b5d4e/mobile_security/images/mobile_security_setup_ui.png)

Each severity level represents the actions enforced in the event of a violation.

 
| Severity Level | Actions Enforced |
| --- | --- |
| `critical` | Wipes app data and logs user out |
| `error` | Blocks access to the app until the issue is resolved, but doesn’t log user out |
| `warn` | Notifies the user of the violation and recommends how to resolve, but user is able to continue using the app |
| `info` | Blocks prohibited action or logs user action and informs user |

At cold starts and when a user’s access token has expired, Enhanced Mobile App Security checks policies and enforces actions. Users can also manually recheck their policies.

![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mobile_security-264-0-0-production-enus/aa5de880-f40d-4478-acb7-729eee2b5d4e/images/icon_tip.png)

Tip

Mobile security policies take effect when users force quit the Salesforce mobile app or when they log in to a new session. To ensure that new or modified settings take effect for all users, we recommend that you revoke access to the Salesforce mobile app so everyone is required to log in again.

We also recommend that you warn users about the changes that you intend to make, especially if you restrict previously available activities.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col style="width:25%">
          <col style="width:25%">
          <col style="width:25%">
          <col style="width:25%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d2597e209">Policy Name</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d2597e212">Description</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d2597e215">Severity Level</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d2597e218">Operating System</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Allowed Device List</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">A device allowlist is a list of devices that a user can use. Specify allowed devices
              as a semicolon separated list.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
              <p>Examples: </p>
              <ul>
                <li><code>iPhone11,8</code> (allows iPhone XR)</li>

              </ul>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Authentication Server Certificate Pinning</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">
              <p>Certificate pinning for the authentication server URLs where the user provides
                credentials to log in.</p>
              <p style="margin-bottom:0;">For more info, see <a href="https://help.salesforce.com/s/articleView?id=sf.mobile_security_mam_server_cert_pin.htm&amp;language=en_US" target="_blank">Configure Authentication Server Certificate
                  Pin</a>.</p>
            </td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block 3D Touch</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">
              <p>3D touch or long press is when a user presses and holds an app icon to perform tasks
                without having to open the app first. </p>
              <div>
                <div class="slds-box slds-box_x-small slds-theme_shade slds-m-top_medium slds-m-bottom_medium">
                  <div class="slds-media slds-media_responsive">
                    <div class="slds-media__figure"><span class="slds-icon_container slds-icon_container_circle slds-icon-note-note"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mobile_security-264-0-0-production-enus/aa5de880-f40d-4478-acb7-729eee2b5d4e/images/icon_note.png" alt="Note"></span></div>
                    <div class="slds-media__body" style="padding-top:.5rem;padding-bottom:.5rem;"><span class="slds-text-title_caps">Note</span> This policy is only supported on iPhones equipped with 3D Touch, up to
                      the iPhone XS.</div>
                  </div>
                </div>
              </div>
            </td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS only</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block Calendar</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Block calendar access on a user’s device.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block Camera</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Block camera access on a user’s device.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS only</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block Contacts</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Block access to contacts on a user's device.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block Custom Keyboard</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">A custom keyboard replaces the built-in keyboard on a mobile device with a third-party
              alternative. Specify if you want to block custom keyboards.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS only</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block File Backups </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">
              <p>A file backup, such as iCloud, syncs files and photos from a user’s mobile device onto
                cloud storage. </p>
              <p style="margin-bottom:0;">The policy blocks files saved within the Salesforce mobile app from
                syncing to a file backup.</p>
            </td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS only</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block Jailbroken Device</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">A jailbroken or rooted mobile device can access system files to install unapproved
              apps or to modify settings.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block Man In The Middle Attack</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">
              <p>A man-in-the-middle attack allows attackers to secretly intercept communications
                between two systems, client and server. </p>
              <p style="margin-bottom:0;">This policy relies on network connectivity. If a
                user’s device has low connectivity or the device is in airplane mode without an internet
                connection, the policy can get triggered.</p>
            </td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block Microphone </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Block microphone access on a user’s device.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS only</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block OS Share Actions </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">
              <p>A user can perform specific tasks such as copying a link or saving an image with
                operating system (OS) share actions. </p>
              <div>
                <div class="slds-box slds-box_x-small slds-theme_shade slds-m-top_medium slds-m-bottom_medium">
                  <div class="slds-media slds-media_responsive">
                    <div class="slds-media__figure"><span class="slds-icon_container slds-icon_container_circle slds-icon-note-note"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mobile_security-264-0-0-production-enus/aa5de880-f40d-4478-acb7-729eee2b5d4e/images/icon_note.png" alt="Note"></span></div>
                    <div class="slds-media__body" style="padding-top:.5rem;padding-bottom:.5rem;"><span class="slds-text-title_caps">Note</span> To ensure your data remains secure, the app will now automatically use a
                      protected file viewer whenever "Block OS Sharing" is enabled. This secure viewer prevents
                      unauthorized sharing and keeps your information within the app.</div>
                  </div>
                </div>
              </div>
            </td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS only</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Block Screenshot </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">A screenshot captures what’s displayed on a user’s mobile device. Specify if you want
              to block screenshots.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Blocked Device List</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">A device blocklist is a list of devices that a user is blocked from using. Specify
              blocked devices as a semicolon separated list.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
              <p>Examples: </p>
              <ul>
                <li><code>iPhone11,8</code> (blocks iPhone XR)</li>

                <li><code>Google</code> (blocks all Google devices)</li>

              </ul>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Check Biometric Login Data</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Validate biometric login data every time a user opens the app. The Check Biometric
              Login Data and Require Device Passcode policies can’t be enabled at the same time.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Disable URL Caching </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">URL cache saves some information from visited websites. Specify if you want to disable
              URL caching.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS only</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Enable Strict Data Leak Protection Controls </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">
              <p>Enabling strict data leak protection blocks access to the context menu in iOS that
                allows a user to copy, web search, and look-up on selected text. Note: In the mobile app,
                some pages are native and some are hybrid. This policy works only on native and non-editable
                hybrid pages.</p>
              <div>
                <div class="slds-box slds-box_x-small slds-theme_shade slds-m-top_medium slds-m-bottom_medium">
                  <div class="slds-media slds-media_responsive">
                    <div class="slds-media__figure"><span class="slds-icon_container slds-icon_container_circle slds-icon-note-error"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mobile_security-264-0-0-production-enus/aa5de880-f40d-4478-acb7-729eee2b5d4e/images/icon_warning.png" alt="Warning"></span></div>
                    <div class="slds-media__body" style="padding-top:.5rem;padding-bottom:.5rem;"><span class="slds-text-title_caps">Warning</span> The Salesforce App currently allows Android users to paste text when
                      an external keyboard is connected and the keyboard's predictive text or clipboard
                      functionality is active.</div>
                  </div>
                </div>
              </div>
            </td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>

          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Log Email</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Log the event when a user emails a contact from the app.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Log Phone Call</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Log the event when a user makes a phone call from the app.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Log Screenshot </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">
              <p>A screenshot captures what’s displayed on a user’s mobile device. An event is logged
                when a user takes a screenshot. </p>
              <p>The event is sent to the org’s event stream and can be
                viewed any even streaming integration, such as Splunk or Fairwarning.</p>
              <p style="margin-bottom:0;">The event
                doesn’t log the screenshot image itself. It only logs the event of a user taking a
                screenshot.</p>
            </td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS only</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Log Security Policy Evaluation Result</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">A security policy evaluation assesses whether users are meeting security requirements.
              Log the results of a security policy evaluation.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Log SMS</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Log the event when a user sends a text message from the app.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Log Out User After Changing Biometric Login Data</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Biometric login uses facial or fingerprint recognition to unlock devices and
              apps.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS only</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Log Out User After Device Restart</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Specify if you want to log out a user after a device restart.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p style="margin-bottom:0;">Severity: <code>info</code>
              </p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Maximum Application Version</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Specify the maximum app version that can be installed on your user’s mobile
              device.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
              <p style="margin-bottom:0;">Example: <code>220.6</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Maximum Days Offline Without Policy Refresh</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">We perform a security policy refresh when a user opens the app. Specify the maximum
              number of days a user can go without a security policy refresh.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
              <p style="margin-bottom:0;">Example: <code>30</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Maximum OS Version</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Specify the maximum operating system (OS) version your user's mobile device can’t
              exceed.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
              <p style="margin-bottom:0;">Example: <code>12.1.9</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Minimum Application Version</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Specify the minimum app version that must be installed on your user’s mobile
              device.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
              <p style="margin-bottom:0;">Example: <code>1.0</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Minimum OS Version</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Specify the minimum operating system (OS) version your user’s mobile device must
              meet.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>The number of the minimum OS version.</p>
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
              <p style="margin-bottom:0;">Example: <code>11.9</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Minimum Security Patch Version </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">A security patch helps protect a user’s mobile device from vulnerabilities. Specify
              the required minimum security patch version.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>The date of the minimum security patch version.</p>
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
              <p style="margin-bottom:0;">Example: <code>2027-05-18</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">Android only</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Mobile Browser URI Scheme</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Specify the mobile browser URI scheme for opening links on a user’s device.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity: <code>info</code></p>
              <p style="margin-bottom:0;">Example for Chrome on iOS: <code>googlechromes://</code></p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Phone Call Application Handler</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Specify an app to use for making a phone call on a user’s device.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity: <code>info</code></p>
              <p style="margin-bottom:0;">The value must be configured as a <code>https://</code> link to the phone call app.
                The app is also required to Universal Links (iOS) and AsssetLinks (Android).</p>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Require Device Passcode</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">A device passcode adds a layer of security for your user’s mobile device. Specify if
              you want to require a device passcode. The Require Device Passcode and Check Biometric Login
              Data policies can’t be enabled at the same time.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">
              <p>Severity:</p>
              <ul>
                <li>
                  <code>critical</code>
                </li>

                <li>
                  <code>error</code>
                </li>

                <li>
                  <code>warn</code>
                </li>

              </ul>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
          <tr class="">
            <td data-label="Policy Name" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e209 ">Resource Certificate Pinning</td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e212 ">Certificate pinning for the resource URLs used by the app to fetch data for the
              user.</td>

            <td data-label="Severity Level" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e215 ">Severity: <code>info</code>
            </td>

            <td data-label="Operating System" class="slds-cell-wrap" style="vertical-align:top;" headers="d2597e218 ">iOS and Android</td>

          </tr>
        </tbody>
      </table>

![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mobile_security-264-0-0-production-enus/aa5de880-f40d-4478-acb7-729eee2b5d4e/images/icon_tip.png)

Tip Use the Security Center app to define and deploy mobile app security policies to selected tenants from the Mobile App Security Policy option in Security Center. For more information on using Security Center to deploy security policies, see [Define and Deploy Security Policies](https://help.salesforce.com/s/articleView?id=xcloud.security_center_deploy_policies.htm&type=5&language=en_US).

- **[Configure Authentication Server Certificate Pin](https://help.salesforce.com/s/articleView?id=xcloud.mobile_security_mam_server_cert_pin.htm&release=264.0.0&type=5)**  
    Provide domain name and certificate fingerprint to configure authentication server certificate pin.