Skip to main content

Integrating the Bravura One app with Bravura Security Fabric

Read the following sections to learn how to register and activate a mobile device using the Bravura One app .

Before you begin
  1. Ensure that the Bravura One app has been installed on a mobile device.

  2. The Bravura One mobile proxy server has been configured and is available for use for Bravura One .

  3. The Bravura Security Fabric server has been configured for Bravura One .

  4. The user that is activating a mobile device has the "Manage mobile devices" privilege.

Integration steps

To activate a mobile device using the Bravura One app:

  1. From a workstation, browse to the Front-end (PSF) self-service and login as a user that has the "Manage mobile devices" privilege.

  2. Click the Register mobile devices link.

  3. If a device has previously been registered, click Add new…

  4. Click Register.

  5. Open the Bravura One app on the mobile device.

  6. If the mobile device does not have any profiles previously set up, tap through the welcome screens to learn more about the Bravura One app and how to register the mobile device.

  7. Tap through all of the welcome screens or skip the instructions.

  8. If the camera view is not immediately launched, tap the Scan QR Code control or Register Device link from the Connection profile screen to scan a new QR Code.

  9. Using the Bravura One app , scan the QR Code that is shown on the workstation.

  10. Tap the Save control on the Bravura One app .

  11. Enter a unique profile name for the connection for the new user profile and tap OK .

    The workstation should indicate that the device is successfully activated and the Bravura One app will be authenticated. The new device is shown in the list of mobile devices on the self-service page.

    The Bravura One app opens the instance within the app. The registered user’s userid is automatically passed in and the page lists available authentication methods to log into the Front-end (PSF).

Language pack support

The Bravura One app supports additional languages to be used for the Bravura Security Fabric instances. See Supporting multiple languages and locales .

The languages must be previously installed on the Bravura Security Fabric server.

The language and locale must also be set on the iOS and Android mobile devices.

On iOS this may be modified from Settings > General > Language & Region and checking values for iPhone Language and Region.

On Android, this is modified from Settings > Languages & input > Languages. The first language and locale found in the list that is also installed on the Bravura Security Fabric instance will be used.

If the en-us default skin is compiled and installed, restart the Mobile Worker Service.

Register multiple profiles

The Bravura One app supports multiple user profiles on a mobile device. Each user profile must be from separate Bravura Security Fabric instances with different Bravura One mobile proxy server URLs configured.

To register multiple profiles on the Bravura One app:

  1. Configure another Bravura Security Fabric server for Bravura One .

  2. Follow the same instructions to register the mobile device for another user profile via QR code.

  3. Open the Bravura One app on the device.

    The Front-end (PSF) authentication page will be loaded for a user already registered in the app.

  4. Tap the gear or ellipsis icon to go to the Settings page.

  5. Tap the Scan QR Code control or Register Device link to scan a new QR Code.

To delete a profile on the Bravura One app:

  1. Tap the gear or ellipsis icon to go to the Settings page.

  2. Tap the recycle bin icon to delete the profile.

Scan a QR Code for two factor authentication

The Bravura One app supports two factor authentication to be able to scan a QR Code from a user’s mobile device using an authentication chain configured for the Mobile authentication module.

The QR Code must be scanned from the Bravura One app that is registered for Bravura One for the user, to be accepted as a form of authentication.

To login using a QR Code for multi-factor authentication on the Bravura One app:

  1. Configure an authentication chain for the Mobile authentication mobile. Add additional modules as needed for added security and authentication.

    See Authentication chains: Configuration

  2. Follow the instructions to register the mobile device for a user profile via QR Code.

  3. Log into Bravura Security Fabric from a browser on a desktop for the user that has a registered mobile device.

  4. Choose the authentication chain configured for the Mobile authentication module.

  5. Open the Bravura One app on the device for the user.

  6. Tap the Computer Login unlock icon.

  7. Tap Authenticate User on iOS or the Scan QR Code (wheel) icon on Android.

  8. Scan the QR Code provided on the Front-end (PSF) authentication page.

    Scanning the QR Code is bypassed when a user logs in from a mobile device if they choose this authentication option. For this reason, additional modules should be configured for added security.

Push notifications on mobile devices

Push Notifications are available two ways:

  1. Subscribe to the Bravura Security hosted Bravura One mobile proxy server for push notifications:

    • Bravura Security host the Bravura One mobile proxy server used for the push notifications.

    • Bravura Security create the Apple and Google store tokens.

    • The required certificates for the push notifications are also configured on the host Bravura One server.

    • Bravura Security create custom mobile apps.

    • The Bravura One app communicates first by contacting the Bravura One mobile proxy server and then to the Bravura Security Fabric server.

    The stock mobile apps cannot be used in the above scenario.

    Please talk to your Bravura Security Account Manager for further details.

  2. Host your own smart device app delivery infrastructure:

    • Host a Bravura One mobile proxy server which is configured for the push notifications.

    • Create the Apple and Google store tokens.

    • Install the certificates required for the push notifications on the Bravura One mobile proxy server.

    • Create custom mobile apps that make use of the Apple and Google store tokens.

    • The Bravura One app communicates first by contacting the Bravura One mobile proxy server and then to the Bravura Security Fabric server.

    Bravura Security can provide instructions to the customer’s packaging team for building the Bravura One application packages. Please talk to your Bravura Security Account Manager for more details.

    The stock mobile apps cannot be used in the above scenario.

Push notifications sent to mobile devices will appear either on the lock screen or as a drop down from the top of the screen if the device is unlocked.

When the mobile device is locked:

  • The notification is shown with the title and message body on Android mobile devices.

  • The notification is shown with the message body on iOS mobile devices.

  • Swiping to the left or right on the notification on Android mobile devices will dismiss the notification.

  • Swiping to the right on the notification on iOS mobile devices will launch the Bravura One app .

  • Swiping to the left on the notification on iOS mobile devices will allow you to dismiss the notification.

  • Multiple push notifications on iOS mobile devices will each be shown on the lock screen in sequential order.

  • Only the most recent push notification will be shown on Android mobile devices when multiple notifications are sent to these devices.

When the mobile device is unlocked:

  • On Android mobile devices, a Bravura Security icon appears on the top left corner. Swiping down will show the notification.

  • On iOS mobile devices and when the Bravura One app is not currently open, the notification will appear as a drop-down from the top of the screen. Tapping on the notification will launch the Bravura One app .

  • Push notifications will not appear on iOS mobile devices when the Bravura One app is currently open.

See more information about using mobpushcli to send push notifications to the mobile devices.