Securely authorizing access to remote resources

A non-transitory computer-readable medium comprising instructions which, when executed by a processor, perform a method for authorizing access to a cloud-based content repository, comprising:

• receiving, based on a determination that a mobile device complies with one or more compliance policies provided by a management service, a management identifier;
• transmitting an access request including the management identifier to the content repository;
• and
• receiving access to the content repository based on a determination that the management identifier is valid, wherein the step of receiving access to the content repository is preconditioned on bringing the mobile device into compliance with an encryption policy, wherein bringing the mobile device into compliance can include enabling encryption based on a configuration profile from the management service, and wherein the compliance is checked at the time of receiving the access request.

A system for authorizing access to a cloud-based content repository, comprising:

• a mobile device;
• a content repository;
• and
• a management server, wherein:
• the mobile device provides a request to access the cloud-based content repository, the request including a management identifier;
• the management server receives the management identifier from the cloud-based content repository;
• the management server determines whether the management identifier is valid and, if so, returns a message to the cloud-based content repository;
• and
• the mobile device receives access to the cloud-based content repository, wherein the step of receiving access to the content repository is preconditioned on bringing the mobile device into compliance with an encryption policy, wherein bringing the mobile device into compliance can include enabling encryption based on a configuration profile from the management service, and wherein the compliance is checked at the time of receiving the access request.