Configuring the Check Point Harmony Mobile Dashboard Integration Settings

Assign the app to the selected groups of usersClosed Personnel authorized to use network resources and applications. or devices.

Note - For easy reference during configuration, you can record your settings in the special table (see "Integration Information" in Configuring UEM to Deploy the Harmony Mobile Protect app).


You need the following details from your BlackBerry UEMClosed Unified Endpoint Management. An architecture and approach that controls different types of devices such as computers, smartphones and IoT devices from a centralized command point. Deployment:

If a Parent Organization Group is integrated with a Harmony Mobile Dashboard, then any child Organization Group of that Parent cannot be integrated with a different Harmony Mobile Dashboard.

Note - Only the devices are synchronized from BlackBerry UEM to the Harmony Mobile Dashboard not users.
If a user doesn't have a device enrolled, their information will not be synchronized to the Harmony Mobile Dashboard.

Configuring BlackBerry UEM Integration Settings on the Harmony Mobile

After you complete the necessary steps, the Integrations pane shows the detailed status of the settings.


  1. Access your Harmony Mobile Dashboard via the Infinity Portal.

  2. Go to Settings > Integration ,Click "+" to create a new integration setting.

    The Integration Wizard opens.


  3. Select Assets

  4. Configure the settings for your - Blackberry UEM Deployment.

    • Server Setup

      Configure your UEM to integrate with the created BlackBerry UEM devices:

      1. In Server Setup section, enter this information:

    • Connector Setup (optional)

      You can configure SandBlast Connector when the UEM in on-premises and has no direct access from the Harmony Mobile cloud. For more information, see Harmony Mobile Connector Integration Guide in the Check Point Support Download center.

      Click Next.

    • Synchronization Configuration

      Configure the groups of devices that will synchronize with Harmony Mobile Dashboard. The dropdown list will automatically populate all the User Groups the API user from previous step has access to


      1. In the Group(s) field:

        1. Click Group(s).

          A dropdown with list of the available groups opens.

        2. Select the group(s) you need for integration with BlackBerry UEM.

      2. In the Android Enterprise Deployment field:

        Select the groups for two deployed applications as part of the BlackBerry UEM Android Enterprise deployment. See Using Android Enterprise with Harmony Mobile

        Note - the list will populate only groups selected from previous step of synchronized groups

        Please make sure you select a group that include Android devices that are configured to have both personal and work profiles (iOS devices can be included in this group as well)

      3. In the Advanced section:

        1. Import Personally Identifiable Information (PII) and set the synchronization intervals.

          You can limit the import of the PII devices (users) to Harmony Mobile, by default it is set to ON.

          Note - If all entries are OFF, the placeholder information set

          for the email address is placed in the Device Owner's Email,

          in form of "UEMDevice UDID@vendor.mdm".


        2. Setting



          Device sync interval

          Interval to connect with UEM to sync devices.

          10-1440 minutes, in 10 minute intervals.

          Device deletion threshold

          Percentage of devices allowed for deletion after UEM device sync (in %).

          0-100% ; use 100% for no threshold *

          Deletion delay after

          Delay device deletion after several sync attempts - device is deleted after this amount of sync tries that confirmed deletion

          1-100 sync tries.

          App sync interval

          Interval to connect with UEM to sync applications.

          10-1440 minutes, in 10 minute intervals.

          Click Next.

    • Tagging Configuration

      Specify whether to send information to BlackBerry UEM in order to communicate the deployment status of Harmony Mobile Protect app and the risk level of the device.


      1. In Tagging Section:

        1. Set Tag device status to ON.

          For integration with BlackBerry UEM, the Device Status tags are interpreted as "user groups" of "CHKP_Status_ Provisioned", "CHKP_Status_Active", or "CHKP_Status_Inactive" which will have an either "0" or "1" when set. We will use the CHKP_Status user groups to determine when to prompt the user to install the Harmony Mobile Protect app on their device. If none of CHKP_Status user groups haven't been set yet for a device, then the device has not been synced with Harmony Mobile Dashboard.

        2. Set Tag device risk to ON.

          For integration with BlackBerry UEM, the Device Risk tags are interpreted as "user groups" of "CHKP_Risk_None", "CHKP_Risk_Low", "CHKP_Risk_Medium", and "CHKP_Risk_High" with the values of "0" or "1". We will use the CHKP_Risk user groups to determine when to enact certain policies or actions on the device. As an example, if CHKP_Risk_High is set to "1", then the device will be sent an in-app notification and blocked from running corporate apps or connecting to corporate assets.

      2. In Advanced section:

        The free-form Mitigation group is any unique name, such as "SBM_HighRisk", that Harmony Mobile will place only devices determined to be at High Risk. Note: This mitigation group must be created as a "user group" in BlackBerry UEM prior to using. Please note that the Mitigation group does not provided the granularity of the different risk levels of the device, just high risk. This method was the original way to group devices at high risk, and it is strongly recommended that you implement the CHKP_Risk and CHKP_Status user groups instead of using the free-form Mitigation group.

      3. Click Finish.

    • Deployment

      Specify the deployment status of a device.

      Note - This section is optional, because Blackberry UEM manages the deployment automatically.


      If you use Harmony Mobile to manage the deployment:

      In this screen you will see the Use token in application configuration settings. Save this token for later as you will use it to manage the application in Adding the Harmony Mobile Protect app to your App Catalog

      In the Advanced section:

      1. Enable options to send email and/or SMS notification to the new users with instructions to download and install the Harmony Mobile Protect app.

      2. Click Finish.


      3. View the Integration Status: In Settings > Integration menu.

        Select the integration you want to shows the information for and click the "i" icon on the top right:

        • UEM Server - The latest server configuration status.

        • Device Sync Status - The synchronized groups and the device sync status time stamp.

        • App Sync Status - The last time applications were fetched from the UEM (Applicable for iOS deployment only).

        • Tagging- Tagging Configuration and Tagging Status.

        • Deployment - Deployment Configuration and Deployment Status.


      4. The 3 dots on the top of the integration settings will allow you to select extra functions:

        Click Edit / (in each section) to edit the settings if needed.

        Click Sync Now to force an immediate device sync call and not wait to the next auto sync cycle.  

        Click Pause / Resume to temporarily stop or resume the device sync process.

        Click Remove to remove the integration settings altogether.

      5. You can click again the "+" to add more integration settings from other different MDMClosed Mobile Device Manager. A security software that enable organizations to implement policies that secure, monitor, and manage end-user mobile devices./UEM solutions in case relevant for your deployment. Harmony Mobile support integration of multiple MDM/UEM solutions from a single dashboard.