Generating contextual compliance policies
Examples of generating contextual compliance policies are described. A meeting invitation can be created by a meeting organizer. The meeting can have compliance rules associated therewith. A compliance policy that facilitates enforcement of the compliance rules during the meeting can be transmitted to attendee client devices and enforced by a management component running on the client devices.
1. A method for generating contextual compliance policies, comprising:
obtaining, by a management service, meeting notification data from an email notification service configured to provide an email notification to a client device, the meeting notification data associated with a meeting notification from an email server associated with an email account, the meeting notification generated in response to an email message from a meeting initiator having a meeting message type;
obtaining, by the management service, a reply to an auto-reply message generated in response to the email message from the meeting initiator, the auto-reply message generated in response to a message being sent to a meeting object configured to generate the auto-reply message, wherein the reply to the auto-reply message specifies at least one compliance policy that alters a device functionality of a client device, wherein the management service is implemented separately from the email notification service and the email server;
obtaining, in response to the meeting notification, the at least one compliance policy that alters a device functionality of a client device associated with the email account; and
transmitting, by the management service, the at least one compliance policy to the client device, wherein a management component on the client device installs the compliance policy, the compliance policy being enforced during a meeting associated with the meeting notification.
2. The method according to claim 1 , further comprising:
obtaining a rule set associated with the meeting from a message classification associated with the email message, wherein the rule set is embedded within the message classification; and
generating the compliance policy based upon the rule set.
3. The method according to claim 2 , wherein the rule set is specified by a meeting organizer in a response to creation of a meeting object in the email server that corresponds to the meeting, wherein the meeting object specifies at least one of a date, a start time, and an end time associated with the meeting object.
4. The method according to claim 2 , wherein the rule set is automatically generated based upon an identity of a meeting organizer or an identity of a user linked to the email account.
5. The method according to claim 1 , further comprising causing, by the management service, an authentication token corresponding to a federated service to be revoked during the meeting, the authentication token associated with a user account linked to the email account, wherein the authentication token is revoked in response to detecting non-compliance with the compliance policy during the meeting.
6. The method according to claim 5 , wherein the authentication token is associated with a physical access credential for a meeting room, wherein revoking the authentication token causes the physical access credential to be denied access to the meeting room.
7. The method according to claim 1 , further comprising:
obtaining a rule set associated with the meeting from user interface generated in response to a link provided to a meeting organizer; and
generating the compliance policy based upon the rule set.
8. A non-transitory computer-readable medium embodying program code executable by at least one computing device, the program code, when executed, causing the at least one computing device to at least:
obtain, in a management service, meeting notification data from an email notification service configured to provide an email notification to a client device, the meeting notification data associated with a meeting notification from an email server associated with an email account, the meeting notification generated in response to an email message from a meeting initiator having a meeting message type;
obtain, in the management service, a reply to an auto-reply message generated in response to the email message from the meeting initiator, the auto-reply message generated in response to a message being sent to a meeting object configured to generate the auto-reply message, wherein the reply to the auto-reply message specifies at least one compliance policy that alters a device functionality of a client device, wherein the management service is implemented separately from the email notification service and the email server;
identify, based upon the meeting notification data, a compliance policy that alters a device functionality of a client device associated with the email account, the compliance policy identified in the meeting notification data associated with the email notification;
obtain, in response to the meeting notification, the compliance policy that alters a device functionality of a client device associated with the email account; and
transmit the compliance policy to the client device, wherein a management component on the client device installs the compliance policy, the compliance policy being enforced during a meeting associated with the meeting notification.
9. The non-transitory computer-readable medium according to claim 8 , wherein the at least one computing device is further directed to at least:
obtain a rule set associated with the meeting from a message classification associated with the email message, wherein the rule set is embedded within the message classification; and
generate the compliance policy based upon the rule set.
10. The non-transitory computer-readable medium according to claim 9 , wherein the rule set is specified by a meeting organizer in a response to creation of a meeting object in the email server that corresponds to the meeting, wherein the meeting object specifies at least one of a date, a start time, and an end time associated with the meeting object.
11. The non-transitory computer-readable medium according to claim 9 , wherein the rule set is automatically generated based upon an identity of a meeting organizer or an identity of a user linked to the email account.
12. The non-transitory computer-readable medium according to claim 8 , wherein the program code further causes the at least one computing device to at least:
cause an authentication token corresponding to a federated service to be revoked during the meeting, the authentication token associated with a user account linked to the email account, wherein the authentication token is revoked in response to detecting non-compliance with the compliance policy during the meeting.
13. The non-transitory computer-readable medium according to claim 12 , wherein the authentication token is associated with a physical access credential for a meeting room, wherein revoking the authentication token causes the physical access credential to be denied access to the meeting room.
14. The non-transitory computer-readable medium according to claim 8 , wherein the program code causes the at least one computing device to at least:
obtain a rule set associated with the meeting from user interface generated in response to a link provided to a meeting organizer; and
generate the compliance policy based upon the rule set.
15. A system for multi-persona enrollment management, comprising:
at least one computing device; and
at least one application executed by the at least one computing device, the at least one computing device causing the at least one computing device to at least:
obtain, in a management service, meeting notification data from an email notification service configured to provide an email notification to a client device, the meeting notification data associated with a meeting notification from an email server associated with an email account, the meeting notification generated in response to an email message from a meeting initiator having a meeting message type;
obtain, in the management service, a reply to an auto-reply message generated in response to the email message from the meeting initiator, the auto-reply message generated in response to a message being sent to a meeting object configured to generate the auto-reply message, wherein the reply to the auto-reply message specifies at least one compliance policy that alters a device functionality of a client device, wherein the management service is implemented separately from the email notification service and the email server;
identify, based upon the meeting notification data, a compliance policy that alters a device functionality of a client device associated with the email account, the compliance policy identified in the meeting notification data associated with the email notification;
obtain, in response to the meeting notification, the compliance policy that alters a device functionality of a client device associated with the email account; and
transmit the compliance policy to the client device, wherein a management component on the client device installs the compliance policy, the compliance policy being enforced during a meeting associated with the meeting notification.
16. The system according to claim 15 , wherein the at least one computing device is further configured to at least:
obtain a rule set associated with the meeting from a message classification associated with the email message, wherein the rule set is embedded within the message classification; and
generate the compliance policy based upon the rule set.
17. The system according to claim 16 , wherein the rule set is specified by a meeting organizer in a response to creation of a meeting object in the email server that corresponds to the meeting, wherein the meeting object specifies at least one of a date, a start time, and an end time associated with the meeting object.
18. The system according to claim 16 , wherein the rule set is automatically generated based upon an identity of a meeting organizer or an identity of a user linked to the email account.
19. The system according to claim 15 , wherein the at least one application causes the at least one computing device to at least:
cause an authentication token corresponding to a federated service to be revoked during the meeting, the authentication token associated with a user account linked to the email account, wherein the authentication token is revoked in response to detecting non-compliance with the compliance policy during the meeting.
20. The system according to claim 19 , wherein the authentication token is associated with a physical access credential for a meeting room, wherein revoking the authentication token causes the physical access credential to be denied access to the meeting room.