<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>MobilityDojo.net</title>
	<atom:link href="http://mobilitydojo.net/feed/" rel="self" type="application/rss+xml" />
	<link>http://mobilitydojo.net</link>
	<description>place of the mobility way</description>
	<lastBuildDate>Mon, 14 May 2012 21:00:00 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>Active Directory Federation Services and YubiKeys</title>
		<link>http://mobilitydojo.net/2012/05/14/active-directory-federation-services-and-yubikeys/</link>
		<comments>http://mobilitydojo.net/2012/05/14/active-directory-federation-services-and-yubikeys/#comments</comments>
		<pubDate>Mon, 14 May 2012 21:00:00 +0000</pubDate>
		<dc:creator>Andreas</dc:creator>
				<category><![CDATA[Coding]]></category>
		<category><![CDATA[How-to's]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[YubiKey]]></category>

		<guid isPermaLink="false">http://mobilitydojo.net/?p=1802</guid>
		<description><![CDATA[The conclusion to my previous post was that I'll be showing how to implement YubiKeys along with Active Directory Federation Services. So, where do we start on this topic?...

It's sort of a logic that says that if you aren't familiar with Active Directory Federation Services (from here on abbreviated as ADFS) a lot of this post will not make sense to you at first glance. So, if you are familiar with ADFS skip ahead - if not I'll have a few paragraphs explaining why you might be interested in taking a look at ADFS.

Surely everyone has noticed that there are a lot of web sites where there's two options for signing in; either using an account for that particular site or &#34;use your Google/Facebook/Twitter account to sign-in&#34;. The basic concept is easy enough - you already have a user identity, so why would you need another one? Why can't you re-use the existing one? If you have ever logged on to a domain-joined Windows computer you've experienced this already. There is a central user catalog called &#34;Active Directory&#34; that you sign in to, and after being verified there you can access your file shares, Exchange account, etc without needing to sign into each and every one of those services.

That is certainly a good reason for re-using the identity you already have, but there's another one as well. A lot of programmers are doomed to repeat the failures of others due to their insistence of doing things from scratch. What are the odds that I will be able to code (on my first attempt) a secure login solution that is resistant against cross-site scripting, SQL injection, buffer overflows, and whatnot? (Hint: don’t go all in betting on my success.) For some reason Facebook doesn't instill a lot of confidence in me when it comes to protecting their users, though they are probably still better at it than me, but at least Google and Windows Live give me the impression of having done a thing or two to proof their solutions.
(...)
I walk through the steps required to support YubiKeys in an ADFS setup.]]></description>
		<wfw:commentRss>http://mobilitydojo.net/2012/05/14/active-directory-federation-services-and-yubikeys/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Two-factor Authentication on Mobile Devices</title>
		<link>http://mobilitydojo.net/2012/05/09/two-factor-authentication-on-mobile-devices/</link>
		<comments>http://mobilitydojo.net/2012/05/09/two-factor-authentication-on-mobile-devices/#comments</comments>
		<pubDate>Wed, 09 May 2012 20:00:00 +0000</pubDate>
		<dc:creator>Andreas</dc:creator>
				<category><![CDATA[Android]]></category>
		<category><![CDATA[iPad]]></category>
		<category><![CDATA[Mobility Rant]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Utilities]]></category>

		<guid isPermaLink="false">http://mobilitydojo.net/?p=1792</guid>
		<description><![CDATA[Lately I've been researching this more than usual partly due to building some services in Windows Azure where I want to provide secure and authenticated access. (And I don't consider myself competent to build a fully hardened solution from scratch just because I know what hashing and salting of passwords means.) While looking into this I came across a nifty product series called YubiKey from http://www.yubico.com, and wanted to share some thoughts on these. If you’ve visited my blog before you might have noticed I’ve already covered client certificates a few times, which of course also meets the definition of two-factor, but this time around we’re looking at hardware for providing the additional factor.
(...)
Yubico is a company that provides key fobs/code generators that you can either integrate with your own systems, or use out-of-the-box for existing online services like LastPass, Google Apps, etc. To authenticate when using a YubiKey you have to provide both a password, (or pin code), and a uniquely generated password in addition to the user name. This concept in itself is nothing new, and the most well-known company in this space is probably RSA whom I gather a lot if IT Pros have come across a few times before already. There’s also a number of banks who provide key fobs for consumers to use for accessing their online banking services (often a non-branded type of key) – so pretty much everyone knows what it is more or less even though they aren't necessarily exposed to all the technical details.]]></description>
		<wfw:commentRss>http://mobilitydojo.net/2012/05/09/two-factor-authentication-on-mobile-devices/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>EAS MD &#8211; Spring 2012 Updates</title>
		<link>http://mobilitydojo.net/2012/04/23/eas-md-spring-2012-updates/</link>
		<comments>http://mobilitydojo.net/2012/04/23/eas-md-spring-2012-updates/#comments</comments>
		<pubDate>Mon, 23 Apr 2012 21:00:00 +0000</pubDate>
		<dc:creator>Andreas</dc:creator>
				<category><![CDATA[ActiveSync]]></category>
		<category><![CDATA[Exchange]]></category>
		<category><![CDATA[Updates]]></category>
		<category><![CDATA[Utilities]]></category>

		<guid isPermaLink="false">http://mobilitydojo.net/?p=1777</guid>
		<description><![CDATA[Short description of, and a few screenshots, of the latest updates to the EAS MD utilities.
Now with support for WBXML output in both versions, and WBXML encoding and decoding in the desktop client.]]></description>
		<wfw:commentRss>http://mobilitydojo.net/2012/04/23/eas-md-spring-2012-updates/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Exchange ActiveSync Building Blocks &#8211; GAL Search</title>
		<link>http://mobilitydojo.net/2012/03/13/exchange-activesync-building-blocks-gal-search/</link>
		<comments>http://mobilitydojo.net/2012/03/13/exchange-activesync-building-blocks-gal-search/#comments</comments>
		<pubDate>Tue, 13 Mar 2012 21:30:23 +0000</pubDate>
		<dc:creator>Andreas</dc:creator>
				<category><![CDATA[ActiveSync]]></category>
		<category><![CDATA[Coding]]></category>
		<category><![CDATA[Exchange]]></category>
		<category><![CDATA[How-to's]]></category>

		<guid isPermaLink="false">http://mobilitydojo.net/?p=1757</guid>
		<description><![CDATA[Based on the developer-friendly implementation of an encoder and decoder for AS-WBXML I just build it with a small sample implementing GAL search.]]></description>
		<wfw:commentRss>http://mobilitydojo.net/2012/03/13/exchange-activesync-building-blocks-gal-search/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Exchange ActiveSync Building Blocks&#8211;Encode &amp; Decode</title>
		<link>http://mobilitydojo.net/2012/03/07/exchange-activesync-building-blocksencode-decode/</link>
		<comments>http://mobilitydojo.net/2012/03/07/exchange-activesync-building-blocksencode-decode/#comments</comments>
		<pubDate>Tue, 06 Mar 2012 22:00:00 +0000</pubDate>
		<dc:creator>Andreas</dc:creator>
				<category><![CDATA[ActiveSync]]></category>
		<category><![CDATA[Coding]]></category>
		<category><![CDATA[Exchange]]></category>
		<category><![CDATA[How-to's]]></category>

		<guid isPermaLink="false">http://mobilitydojo.net/?p=1746</guid>
		<description><![CDATA[If you have followed the "building blocks" series you will have noticed that I have done the AS-WBXML by hand. This approach clearly doesn't scale, and will not work outside these constrained snippets intended for learning. And it makes for sample apps that are only able to serve up a very specific purpose. (Now, the sample code is meant for copying and pasting so that's pretty much by design anyways.) Not to mention it has made me look lazy for not doing things properly 

Clearly we would be a significant step further if we didn't have to create the web requests by looking up values in code pages and type in each individual byte. So, how about we take it to that very next level of Exchange ActiveSync "hacking"?
(...)
We go through how we can build a utility for encoding and decoding ASWBXML so you can copy &#038; paste XML samples from the MSDN library and test against your Exchange Server.]]></description>
		<wfw:commentRss>http://mobilitydojo.net/2012/03/07/exchange-activesync-building-blocksencode-decode/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Exchange ActiveSync Building Blocks &#8211; DocumentLibrary</title>
		<link>http://mobilitydojo.net/2012/02/20/exchange-activesync-building-blocks-documentlibrary/</link>
		<comments>http://mobilitydojo.net/2012/02/20/exchange-activesync-building-blocks-documentlibrary/#comments</comments>
		<pubDate>Mon, 20 Feb 2012 15:00:00 +0000</pubDate>
		<dc:creator>Andreas</dc:creator>
				<category><![CDATA[ActiveSync]]></category>
		<category><![CDATA[Coding]]></category>
		<category><![CDATA[Exchange]]></category>
		<category><![CDATA[How-to's]]></category>

		<guid isPermaLink="false">http://mobilitydojo.net/?p=1732</guid>
		<description><![CDATA[So, it's been a couple of months since I've been digging through the Exchange ActiveSync protocol and creating "building blocks", but the series is not abandoned yet. Sure, it went on a hiatus after covering a lot of ground in a comparably small time frame, but I will return to the topic whenever there's something I find worthwhile. (Replicating every bit of info already in MSDN is obviously not worthwhile.)

Today I thought I'd take a closer look at a feature many probably don't consider as an ActiveSync feature; file browsing :)
]]></description>
		<wfw:commentRss>http://mobilitydojo.net/2012/02/20/exchange-activesync-building-blocks-documentlibrary/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>/CertSrv vs Mobile Devices</title>
		<link>http://mobilitydojo.net/2012/01/31/certsrv-vs-mobile-devices/</link>
		<comments>http://mobilitydojo.net/2012/01/31/certsrv-vs-mobile-devices/#comments</comments>
		<pubDate>Tue, 31 Jan 2012 21:59:00 +0000</pubDate>
		<dc:creator>Andreas</dc:creator>
				<category><![CDATA[Android]]></category>
		<category><![CDATA[Device Management]]></category>
		<category><![CDATA[How-to's]]></category>
		<category><![CDATA[iOS]]></category>
		<category><![CDATA[iPad]]></category>
		<category><![CDATA[iPhone]]></category>
		<category><![CDATA[Windows Phone]]></category>

		<guid isPermaLink="false">http://mobilitydojo.net/?p=1717</guid>
		<description><![CDATA[I mentioned in my last blog about Android Ice Cream Sandwich that it is now possible, (actually from Android 3.x Honeycomb), to enroll certificates directly from the /CertSrv web site onto your mobile device. (If you're running a Microsoft CA of course.)

This is all nice and dandy, but it's not like Android devices are the only devices you're likely to be supporting. With the tablet varieties the split is something like 90/10 iPad vs "the rest". However if you ever tried loading up /CertSrv on your iOS device or your Windows Phone you'll have noticed that it's not working.

I find this slightly annoying, and decided to look into this further. Those pesky ActiveX controls can't be the only reason right? :)

There's two things to sort out here really; is it anything with the web pages themselves and the server, or something on the browser side. Turns out there's a bit of both involved actually.
(...)
I go through how it works and how it doesn't work - and some of the why's.]]></description>
		<wfw:commentRss>http://mobilitydojo.net/2012/01/31/certsrv-vs-mobile-devices/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Client Certificates in Android Ice Cream Sandwich</title>
		<link>http://mobilitydojo.net/2011/12/31/client-certificates-in-android-ice-cream-sandwich/</link>
		<comments>http://mobilitydojo.net/2011/12/31/client-certificates-in-android-ice-cream-sandwich/#comments</comments>
		<pubDate>Sat, 31 Dec 2011 20:00:00 +0000</pubDate>
		<dc:creator>Andreas</dc:creator>
				<category><![CDATA[Android]]></category>
		<category><![CDATA[Device Management]]></category>

		<guid isPermaLink="false">http://mobilitydojo.net/?p=1703</guid>
		<description><![CDATA[I touched upon the release of Android 4.0, also known as Ice Cream Sandwich, back in October: 
http://mobilitydojo.net/2011/10/19/ice-cream-sandwiches-for-the-kids/

That was based upon the official docs and emulator, but about a week ago I finally got an actual device in my hands in the form of the Galaxy Nexus, and I find it a lot easier to test on real hardware so I thought I’d revisit the OS to test out some client certificate related features. (The eye candy factor is greatly improved, but it’s not like you can’t find tests of that all over the web.)

I said that certificate support was improved – for instance the support of client certificates with the Google-supplied Exchange ActiveSync client. This implied there might have been some improvements for the browser as well, and the short answer would be yes 
]]></description>
		<wfw:commentRss>http://mobilitydojo.net/2011/12/31/client-certificates-in-android-ice-cream-sandwich/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>System Center Configuration Manager 2012&#8211;Release Candidate Comes Along</title>
		<link>http://mobilitydojo.net/2011/11/09/system-center-configuration-manager-2012release-candidate-comes-along/</link>
		<comments>http://mobilitydojo.net/2011/11/09/system-center-configuration-manager-2012release-candidate-comes-along/#comments</comments>
		<pubDate>Tue, 08 Nov 2011 22:00:00 +0000</pubDate>
		<dc:creator>Andreas</dc:creator>
				<category><![CDATA[Device Management]]></category>
		<category><![CDATA[SCMDM]]></category>
		<category><![CDATA[Updates]]></category>

		<guid isPermaLink="false">http://mobilitydojo.net/?p=1689</guid>
		<description><![CDATA[We’re fond of dabbling with Microsoft products at this site, and System Center is no exception (without Virtual Machine Manager my lab would have been less manageable). I’ve done a lot of articles on System Center Mobile Device Manager, and have also taken quick looks at the successor; System Center Configuration Manager 2012 and the Beta releases: 
System Center Configuration Manager 2012 Beta 2 Available 
SCCM v.Next hits Beta 1

It only seemed natural to at least do an install of the Release Candidate of said product. Now, I have no doubt I can manage my desktop systems and servers with Configuration Manager, but the mobility features…so far they haven’t been causing manic episodes. I have tried to look through the console to see what is available now, assuming that the RC should be pretty much feature complete.
(...)
This time around we get support for more devices, but perhaps not the way we would have wanted to. Read on to see what I mean.]]></description>
		<wfw:commentRss>http://mobilitydojo.net/2011/11/09/system-center-configuration-manager-2012release-candidate-comes-along/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>iOS 5 &#8211; Changes to MDM Usage Policies</title>
		<link>http://mobilitydojo.net/2011/10/20/ios-5-changes-to-mdm-usage-policies/</link>
		<comments>http://mobilitydojo.net/2011/10/20/ios-5-changes-to-mdm-usage-policies/#comments</comments>
		<pubDate>Thu, 20 Oct 2011 20:00:00 +0000</pubDate>
		<dc:creator>Andreas</dc:creator>
				<category><![CDATA[Device Management]]></category>
		<category><![CDATA[iOS]]></category>
		<category><![CDATA[iPad]]></category>
		<category><![CDATA[iPhone]]></category>

		<guid isPermaLink="false">http://mobilitydojo.net/?p=1678</guid>
		<description><![CDATA[I have already covered the new (enterprise relevant) features in iOS 5: 
http://mobilitydojo.net/2011/10/04/ios-5-anything-in-it-for-the-enterprise-conclusion/

Right after releasing that post Apple just launched a couple of changes to how these features work, or rather the policies relating to the usage of them. (The features themselves are still on – don’t worry.)
(...)
A couple of minor things regarding availability of MDM API and Apple Push Notification Service.]]></description>
		<wfw:commentRss>http://mobilitydojo.net/2011/10/20/ios-5-changes-to-mdm-usage-policies/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
	</channel>
</rss>

