Follow

Validate Mobile SDK Integration

Description

  • This page describes how to validate that Shape Mobile SDK has been integrated properly.

Return to Integrating Shape Defense

 

Environment

  • Shape Defense for Mobile

Procedure

Complete these 4 Test-Cases

  1. Review the Integrate Shape Mobile SDK articles to make sure all integration steps have been followed:
  2. SDK Initialization
    1. Deploy the app onto a device for the first time (if the device already had the app, remove it before this test).
    2. Start the app.
    3. On the Shape Defense Summary reports, filter by your client IP.
    4. You should observe a configuration fetch from your app.
  3. Decorated Request
    1. Make a request for every protected URL
    2. On the Shape Defense Summary reports, filter by your client IP.
    3. You should see all protected request marked as Human.
  4. Mitigation
    1. In the Portal, navigate to Config > Proxy / App Configuration > Proxy / App Management 
    2. Edit the existing Application proxy that you are testing
    3. Under the Service HTTPS, there is a tab for Shape Defense.
    4. Check the Force Action checkbox
      • When checked, it forces mitigation of all traffic to the endpoint 
      • Should be used only for testing and only on non-production endpoint
    5. Save and Deploy this configuration.
    6. Make protected requests
    7. On the Shape Defense Summary reports, filter by your client IP.
    8. You should see all protected requests marked as an Automation
    9. You should see a configuration fetch occur right after each blocked request
    10. Make sure to uncheck Force Action, Save and Deploy to revert the configuration to its original state.

Your integration is successful if you were able to complete all four of the above test-cases. Incorporate these Shape SDK test-cases into your standard regression testing.

 

Best Practice:

Before releasing a new app into the production environment, set mitigation action to Flag. Perform the False Positive Analysis [LINK] before re-enabling mitigation.

 

Related Content

Return to Integrating Shape Defense

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request