Partners and merchants can manage their payment devices with a Mobile Device Management (MDM) solution, especially on Android devices without Google Mobile Services (non-GMS). This article explains how Softpay looks at MDM distribution and what an MDM solution needs to meet before it can be used to install and update the Softpay app.
MDM or store: two ways to distribute Softpay
Softpay is MPoC certified. From an MPoC compliance perspective, we recognise two ways of distributing the app:
Store – an app store run on behalf of the operating system or device maker, for example Google Play, Sunmi Store or iMin Store.
MDM – a device management system run by the merchant or by a service provider on behalf of the merchant.
Because an MDM is the merchant's responsibility and most MPoC technical requirements are handled by the device's operating system, the requirements for MDM solutions are limited. Softpay's own responsibility is to provide releases and updates securely to the merchant.
Requirements for an MDM solution
To be used for distributing Softpay, an MDM solution must:
Be managed by or on behalf of the merchant. The MDM is operated by the merchant itself, or by a partner acting for the merchant
Not bypass operating system security. The MDM must install and manage apps through the normal Android security mechanisms, without disabling or working around them.
Appear as its own installation source. When checking how Softpay was installed on a device, the installation must show up as a distinct installation method that belongs to the MDM product or to the merchant.
Deploy only verified app files. The partner or the merchant must make sure the Softpay app is genuine and unmodified before it is deployed through the MDM.
Keep the app up to date. Where a partner operates the MDM for a merchant, the partner is responsible for making sure Softpay stays updated on all managed devices.
Getting a new MDM approved
Adding a new MDM or store is a formal change on Softpay's side, because it requires an update to our documentation of approved distribution channels. Before you start deploying Softpay through a new MDM please contact Softpay with the following info:
The name of the MDM product and who operates it (merchant or partner)
The device models it will manage
How the MDM identifies itself as the installation source on the device
How app files are verified before deployment and how updates will be rolled out