I keep hearing about MAM in UEM discussions, but I’m not really sure what it actually is or how it works. Can someone explain it in simple terms?
What is MAM? I’ve been hearing about it a lot. Can someone explain?Solved
Replies (8)
From what I understand, Mobile Application Management (MAM) is more about securing the app and the data inside it, instead of controlling the whole device. It’s especially useful when users are on personal devices, since IT can protect corporate data without taking full control of everything.
You can set controls around how users access apps, like requiring authentication before opening them, setting inactivity timeouts so apps lock after some time, and even limiting failed login attempts. So, if someone keeps guessing passwords, the app basically says “enough for now” 😄
On the data side, it helps control how information moves. You can restrict copy-paste between apps, block screenshots, and limit sharing to only approved apps. That way, sensitive data doesn’t accidentally end up somewhere it shouldn’t.
Yeah, and the part I find useful is how it can work with compliance-based access. So, access to apps isn’t just automatic — it depends on certain conditions being met.
It feels like a secure layer around the apps. Users still use their devices normally, but when it comes to work apps, there are clear boundaries in place.
So, it’s more about protecting the app and data instead of managing whole device.
We’ve been using something similar, and the hardest part is not the setup, it’s user behaviour. If controls feel too strict, people will find ways around them. If it’s too loose, you’re compromising security. Finding that middle ground takes a bit of trial and error.
True, users somehow always find the one thing you didn’t think of 😄
Did you end up changing your policies a lot after rollout?
A few times, yes. First rollout wasn’t perfect. We adjusted based on real usage and also explained the reasoning to users. Once they understood it’s about protecting data and not just restricting them, things improved quite a bit.
In our case, combining MAM with Conditional Access policies made a big difference. We only allow access to corporate apps if they meet our security requirements. It adds an extra layer of control without managing the full device.
Also, always start with a pilot group. Better a few users complaining than the whole organization raising tickets at the same time.