Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Application Data Replication feature in Control Center (to be released in Q1) #8717

Open
wants to merge 5 commits into
base: development
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 20 additions & 6 deletions content/en/docs/control-center/security/security.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ A member in Control Center means a user of the Mendix platform who participates

The **Settings** page in the **Security** catogry in Control Center allows you to configure the security settings, manage the single sign-on configurations, and view the security history of your company.

## Security Settings
## Security Settings Tab

### Password Policy

Expand All @@ -31,12 +31,26 @@ To disable the digital signing of emails, turn off the toggle. To enable the dig

Digital signing of email content contributes to security, but why do you want to disable the digital signing of email content sometimes? Digital signing might interfere with other email safety measures like “External Email Warning”. This feature might add a customized HTML warning to the email. Since Mendix emails cannot be altered, some email servers will wrap the original message in a blank email and add the original email as an attachment. This is not beneficial for the experience of the user and will make the emails look suspicious, impacting user engagement. Also, it makes searching for emails with specific text content more difficult for users.

## Single Sign-On
### Application Data Replication {#application-data-replication}

On the **Single Sign-On** tab, you can set up an identity federation between the Mendix Platform and your corporate identity provider. We call this feature *Bring Your Own Identity Provider (BYOIDP)* and you can find more information in [How to Set Up an SSO (BYOIDP)](/control-center/security/set-up-sso-byoidp/).
{{% alert color="info" %}}
This feature is only available for [premium cutomers](/developerportal/deploy/mendix-cloud-deploy/#additional-resources).
{{% /alert %}}

For security and disaster recovery purposes, you may want to replicate application data in Mendix Cloud to another region. If that is the case, click **Activate** to activate application data replication. By default, application data replication is activated.
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Feedback from Leontien:

I would rephrase the text to something like:
This setting is ON by default: Mendix provides a service level agreement for these Cloud Services, which
includes high-availability and disaster recovery measures. These measures involve the replication
of customer’s application data (file storage and database backups) to other availability zones
within the region and to a secondary region to ensure data accessibility in case of an outage in
the primary region. For the most
current information on available Mendix Cloud regions consult the Documentation or visit:
https://www.mendix.com/evaluation-guide/app-lifecycle/mendix-cloud-overview and
https://docs.mendix.com/developerportal/deploy/mxcloudv4#3-where-will-my-data-be-hosted.
If you want to keep your data always in the same region, click Deactivate to deactivate application data replication. You will be asked to sign a statement that you understand this impacts the agreement with Mendix regarding the service levels, disaster recovery and SOC2 compliance.
{{% alert color="info" %}} When you activate or deactivate application data replication, this only affects apps and environments that have not been provisioned yet. {{% /alert %}}

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.


When application data application is activated, all data and backups of your application on Mendix Cloud are replicated to another region in the country. If there is only one region in the country, the data is replicated to a region in another country.

If you want to keep your data always in the same region, click **Deactivate** to deactivate application data replication.

## Security History
{{% alert color="info" %}}
When you activate or deactivate application data replication, this only affects apps and environments that have not been provisioned yet.
{{% /alert %}}

## Single Sign-On Tab

On the **Single Sign-On** tab, you can set up an identity federation between the Mendix Platform and your corporate identity provider. We call this feature *Bring Your Own Identity Provider (BYOIDP)* and you can find more information in [How to Set Up an SSO (BYOIDP)](/control-center/security/set-up-sso-byoidp/).

On the **Security History** tab, you can click **Show Security History** to open a page (in a new browser tab) that presents an audit trail of security-related changes in **App History** and **Member History**. You can search through and view details on these changes as well as export the audit trail to a CSV file.
## Security History Tab

{{< figure src="/attachments/control-center/security/security.jpg" class="no-border" >}}
On the **Security History** tab, you can view a detailed history of changes to application data replication settings, including when the changes were made and by whom.
4 changes: 4 additions & 0 deletions content/en/docs/deployment/mendix-cloud-deploy/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -183,6 +183,10 @@ Fallback ensures that the data in your database is automatically copied to a dat

The connections between AZs are low latency. However, the implementation of these features means that your monitoring may indicate that apps deployed to Mendix Cloud under a Premium plan suffer an additional latency of a few milliseconds compared with apps deployed using a Standard plan. For a well-designed app, this difference is not noticeable to end-users.

#### Application Data Replication

With a premium plan, you can replicate application data in Mendix Cloud to another region for security and disaster recovery purposes. For more information, see the [Application Data Replication](/control-center/security-settings/#application-data-replication) section in *Security Settings in Control Center*.

#### Regional Fallback{#regional-fallback}

You can also purchase a Premium Plus plan, which provides all the features of the Premium plan, with the addition of Regional Fallback.
Expand Down
Binary file not shown.