Knox Authentication Manager (KAM) is an advanced autofill service for fully managed, corporate owned shared devices.

KAM offers multiuser facial biometrics to speed-up shared device sign ins (optional) and multiuser seamless sign in automation for an SSO-like experience across all work apps, including non-SS0-enabled apps. KAM increases worker productivity and, in some cases, worker safety by reducing distractions caused by manual sign ins. With KAM, workers can pick up any mobile device and instantly “make it their own” for the duration of their shift.

KAM uses the AccessibilityService API to automate sign in flows. Workers’ user profiles are securely stored on company owned shared devices, are securely synced across company shared device groups over WiFi, and are never accessible to, nor shared with, anyone.

KAM works on supported Samsung devices running VMWare Workspace ONE (Launcher), Microsoft Intune (Managed Home Screen), SOTI MobiControl (Kiosk Mode with Azure AD), and Samsung Knox Manage (Kiosk Mode with Azure AD).

※ Application permissions
The following permissions are required for the app service.
[Required permissions]
- Camera: Used for face detection and recognition.
- Notifications: Used to display KAM in notification panel.
- Contacts: Used to clean up logged in accounts upon KAM session ending if configured.
If your system software version is lower than Android 6.0, please update the software to configure App permissions.
Previously allowed permissions can be reset on Apps menu in device settings after software update.