From 5a88bb5dee6b00f8a6a461d696b3b42370a73ba1 Mon Sep 17 00:00:00 2001 From: katarzyna-koltun-mx <108737161+katarzyna-koltun-mx@users.noreply.github.com> Date: Mon, 16 Dec 2024 16:10:36 +0100 Subject: [PATCH 1/5] Security summary --- .../en/docs/deployment/general/security.md | 69 +++++++++++++++++++ 1 file changed, 69 insertions(+) create mode 100644 content/en/docs/deployment/general/security.md diff --git a/content/en/docs/deployment/general/security.md b/content/en/docs/deployment/general/security.md new file mode 100644 index 00000000000..fb308fbf994 --- /dev/null +++ b/content/en/docs/deployment/general/security.md @@ -0,0 +1,69 @@ +--- +title: "Implementing Security" +url: /developerportal/deploy/security/ +weight: 10 +description: "An overview of the security options available when building, running, and governing your apps." +--- + +## Introduction + +Security is a key aspect that must be considered when building apps, integrating with other parts of your landscape, or governing your organization and apps within the Mendix platform. Information about security is present in various sections of Mendix documentation. This page provides an overview of the available articles on this topic. + +## Planning the Implementation + +Before creating your app, refer to the Evaluation Guide to review the available security options: + +* [Evaluation Guide: Security](https://www.mendix.com/evaluation-guide/enterprise-capabilities/security/) + +## Building an App + +When building your application, refer to the following topics: + +* [App Modeling: Security](/refguide/security/) - An overview of the security options available when building an app +* [Create a Secure App](/howto/security/create-a-secure-app/) - A detailed walk through the process of creating a secure app +* [Implement Best Practices for App Security](/howto/security/best-practices-security/) - Recommended best practices for app security +* [Set Up Anonymous User Security](/howto/security/set-up-anonymous-user-security/) - A detailed walk through the process of setting up anonymous user security +* [App Security](/refguide/app-security/) - An explanation of the **App security** menu and its sub-menus: + * [User Roles](/refguide/user-roles/) - An explanation of the **User roles** menu + * [Administrator](/refguide/administrator/) - An explanation of the **Administrator** menu + * [Demo Users](/refguide/demo-users/) - An explanation of the **Demo users** menu + * [Anonymous Users](/refguide/anonymous-users/) - An explanation of the **Anonymous users** menu + * [Password Policy](/refguide/password-policy/) - An explanation of the **Password policy** menu + * [Strict Mode](/refguide/strict-mode/) - An explanation of the **Strict mode** menu +* [App Modeling: Module Security](/refguide/module-security/) - An overview of the security options available when creating a module +* [Security and Shared Datasets](/refguide/security-shared-datasets/) - An overview of the secure integration with OData services (shared datasets) +* [Configuring Security for a Workflow Process](/refguide/workflow-security/) - An overview of the security configuration available for workflow processes +* [Mobile: Offline Data Security](/refguide/mobile/building-efficient-mobile-apps/offlinefirst-data/local-data-security/) - A detailed walk through the process of configuring offline data security for mobile apps +* [Content Security Policy](/howto/security/csp/) - An overview of content security policies that you can configure for your apps +* [Two-Factor Authentication](/developerportal/deploy/two-factor-authentication/) - An explanation of the available options when setting up two-factor authentication + +## Running your App + +For information about security practices for business-as-usual operations of your app, refer to the following topics: + +### On Mendix Cloud + +* [Secure Outgoing Connections from Your App](/developerportal/deploy/securing-outgoing-connections-from-your-application/ ) - An overview of the various scenarios for securing outgoing connections on the Mendix Cloud + +### On Mendix for Private Cloud + +* [Mendix for Private Cloud: How Are My Apps and Data Secured in Mendix for Private Cloud?](https://www.mendix.com/evaluation-guide/deployment/private-cloud/mendix-private-cloud/) - An overview of the Mendix for Private Cloud offering and the security it offers + +### On Premises + +* [Security for Your On-Premises Installation](/developerportal/deploy/security-checklist-for-your-on-premises-installation/) - A checklist of security options available for apps installed on premises + +## Governing your Organization and its Apps + +For information about security practices for app governance, refer to the following topics: + +* [Apps: Software Composition](/developerportal/deploy/software-composition/) - An explanation of the **Software Composition** page of the **Apps** menu +* [Control Center: Software Composition](/control-center/software-composition/) - An explanation of the **Software Composition** page of the **Control Center**, and the options available to identify the dependencies in deployment packages in the Mendix Portal +* [Security Settings in Control Center](/control-center/security/) - Settings to help you manage access to the Mendix Platform for users in your company +* [Set up an SSO (BYOIDP)](/control-center/security/set-up-sso-byoidp/) - A detailed walk through the process of configuring BYODIDP SSO in the Control Center +* [Data Accessibility and Security](/catalog/manage/security/) - An overview of the security options available in the Catalog +* [Mitigate Security Risks](https://www.mendix.com/evaluation-guide/governance/risk-control/mitigate-security-risk/) - Best practices for mitigating security risks + +## Getting Support + +For additional information, frequently asked questions, and troubleshooting tis, refer to [Frequently Asked Questions – Security](/support/security-findings-faq/). If you have more questions, contact your Customer Success Manager (CSM), or join the [Mendix Community forum](https://community.mendix.com/p/community). \ No newline at end of file From c22495328fb953e9b6de29f2eda577e70769d817 Mon Sep 17 00:00:00 2001 From: katarzyna-koltun-mx <108737161+katarzyna-koltun-mx@users.noreply.github.com> Date: Thu, 19 Dec 2024 19:24:22 +0100 Subject: [PATCH 2/5] SME review --- .../docs/{deployment/general/security.md => security/_index.md} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename content/en/docs/{deployment/general/security.md => security/_index.md} (100%) diff --git a/content/en/docs/deployment/general/security.md b/content/en/docs/security/_index.md similarity index 100% rename from content/en/docs/deployment/general/security.md rename to content/en/docs/security/_index.md From b800732c91f8b012c4cc10cfa2be7f8b8c472d16 Mon Sep 17 00:00:00 2001 From: katarzyna-koltun-mx <108737161+katarzyna-koltun-mx@users.noreply.github.com> Date: Thu, 19 Dec 2024 19:25:17 +0100 Subject: [PATCH 3/5] SME review --- content/en/docs/security/_index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/en/docs/security/_index.md b/content/en/docs/security/_index.md index fb308fbf994..8693480754b 100644 --- a/content/en/docs/security/_index.md +++ b/content/en/docs/security/_index.md @@ -1,6 +1,6 @@ --- -title: "Implementing Security" -url: /developerportal/deploy/security/ +title: "Security" +url: /security/ weight: 10 description: "An overview of the security options available when building, running, and governing your apps." --- From c31ee0fedc7b0f1503545bf3cb0fd245a46b2dd9 Mon Sep 17 00:00:00 2001 From: katarzyna-koltun-mx <108737161+katarzyna-koltun-mx@users.noreply.github.com> Date: Fri, 20 Dec 2024 13:53:58 +0100 Subject: [PATCH 4/5] feedback from Mark --- .../{security/_index.md => developerportal/security-summary.md} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename content/en/docs/{security/_index.md => developerportal/security-summary.md} (99%) diff --git a/content/en/docs/security/_index.md b/content/en/docs/developerportal/security-summary.md similarity index 99% rename from content/en/docs/security/_index.md rename to content/en/docs/developerportal/security-summary.md index 8693480754b..613c432dd1f 100644 --- a/content/en/docs/security/_index.md +++ b/content/en/docs/developerportal/security-summary.md @@ -1,6 +1,6 @@ --- title: "Security" -url: /security/ +url: /developerportal/security/ weight: 10 description: "An overview of the security options available when building, running, and governing your apps." --- From 7e9744f29606add53edc7a82eb27a237cc225f2b Mon Sep 17 00:00:00 2001 From: katarzyna-koltun-mx <108737161+katarzyna-koltun-mx@users.noreply.github.com> Date: Fri, 20 Dec 2024 13:57:43 +0100 Subject: [PATCH 5/5] Feedback from Mark --- layouts/partials/landingpage/user-journey-cards.html | 1 + 1 file changed, 1 insertion(+) diff --git a/layouts/partials/landingpage/user-journey-cards.html b/layouts/partials/landingpage/user-journey-cards.html index 857ecb06734..7780922c73f 100644 --- a/layouts/partials/landingpage/user-journey-cards.html +++ b/layouts/partials/landingpage/user-journey-cards.html @@ -63,6 +63,7 @@

Collaborate

Govern