Knox Authentication Manager (KAM) is an advanced autofill service for fully managed, corporate owned shared devices.

KAM offers multiuser facial biometrics to speed-up shared device sign ins (optional) and multiuser seamless sign in automation for an SSO-like experience across all work apps, including non-SS0-enabled apps. By eliminating manual sign ins, KAM increases worker productivity and, in some cases, worker safety, by reducing distractions. With KAM, workers can pick up any mobile device and instantly “make it their own” for the duration of their shift.

KAM uses the AccessibilityService API to automate sign in flows. Workers’ user profiles are securely stored on company owned shared devices, are securely synced across company shared device groups over WiFi, and are never accessible to, nor shared with, anyone.

KAM supports Samsung shared devices using one of the following supported UEM environments:
• VMWare Workspace ONE (Launcher)
• Microsoft Intune (Managed Home Screen)
• SOTI MobiControl (Kiosk Mode / Lockdown Profile) – Customer Azure AD required for initial user authentication
• Samsung Knox Manage (Kiosk Mode) – Customer Azure AD required for initial user authentication