Logical diagram showing data flows between the required Oracle Mobile Security Suite components. The Secure Workspace is installed on a mobile device and connects to the Mobile Security Access Server component, which is located in the DMZ. The Mobile Security Access Server component forwards connections to the Mobile Security Manager server and the Oracle Access Management server, located in the Green Zone. Also in the Green Zone, the identity store directory server provides LDAP updates to the Access Manager and Mobile Security Manager components. The Oracle Access Management console is hosted on the Policy Manager Server, and using the console, System Administrators can manage Access Manager, Mobile Security Manager, and Mobile Security Access Server, as well as other Oracle Access Management components (not shown). The Mobile Security Manager component sends notifications to the Secure Workspace on the mobile device using either Apple Push Notification Service (APNS) for iOS devices, or Google Cloud Messaging (GCM) for Android devices. Oracle Access Management persists system data (not LDAP data) in an OAM data store, and Mobile Security Manager persists its system data in a separate Oracle Mobile Security Suite data store.