Knox Authentication Manager
KAM offers optional multiuser facial biometrics to speed-up shared device sign-ins. KAM’s seamless sign-in automation creates an SSO-like experience across all work apps that require manual sign-in. Users’ profiles are securely synced across shared devices so users can enroll once on a single device, and then pick up any other device to “make it their own” for the duration of their shift.
KAM uses the AccessibilityService API to automate sign-in flows. Workers’ user profiles are securely stored on company shared devices, securely synced across company shared device groups over WiFi, and are never accessible nor shared with anyone.
KAM works on fully managed devices in device owner (DO) mode only. Please see the admin guide for supported UEMs and other requirements: https://docs.samsungknox.com/admin/knox-authentication-manager/welcome.htm
※ Application permissions
The following permissions are required for the app service.
[Required permissions]
- Camera: Used for face detection and recognition.
- Notifications: Used to display KAM in notification panel.
- Contacts: Used to clean up logged in accounts upon KAM session ending if configured.
If your system software version is lower than Android 6.0, please update the software to configure App permissions.
Previously allowed permissions can be reset on Apps menu in device settings after software update.
