Logical diagram showing data flows if Active Directory is the data store. The Secure Workspace is installed on a mobile device and connects to the Mobile Security Access Server component, which is located in the DMZ. The Mobile Security Access Server component forwards connections to the Mobile Security Manager server and Active Directory, located in the Green Zone. Active Directory provides LDAP updates to the Oracle Access Management and Mobile Security Manager components. The Oracle Access Management console is hosted on the Policy Manager Server, and using the console, System Administrators can manage Mobile Security Manager, Mobile Security Access Server, andother Oracle Access Management components (not shown). The Mobile Security Manager component sends notifications to the Secure Workspace on the mobile device using either Apple Push Notification Service (APNS) for iOS devices, or Google Cloud Messaging (GCM) for Android devices. Oracle Access Management persists system data (not LDAP data) in an OAM data store, and Mobile Security Manager persists its system data in a separate Oracle Mobile Security Suite data store.