An apparatus, comprising: a memory; a network interface; one or more processors; and computer program code stored on a non-transitory storage medium comprising instructions operative to cause the one or more processors to: responsive to a request to a mobile device management system for one or more applications available for installation on a mobile device, accessing by the mobile device management system a user profile associated with the request and a mobile device profile associated with the mobile device, wherein the user profile includes an enterprise organizational information of a user associated with the request; filtering, by the mobile device management system, a catalog of applications based on a set of policies applied to the user profile and mobile device profile to select a set of applications, said filtering being based at least in part on a security level associated with said mobile device and said set of applications including one or more applications included in the set based at least in part on the security level associated with said mobile device; and returning the set of applications in response to the request. a memory; a network interface; one or more processors; and computer program code stored on a non-transitory storage medium comprising instructions operative to cause the one or more processors to: responsive to a request to a mobile device management system for one or more applications available for installation on a mobile device, accessing by the mobile device management system a user profile associated with the request and a mobile device profile associated with the mobile device, wherein the user profile includes an enterprise organizational information of a user associated with the request; filtering, by the mobile device management system, a catalog of applications based on a set of policies applied to the user profile and mobile device profile to select a set of applications, said filtering being based at least in part on a security level associated with said mobile device and said set of applications including one or more applications included in the set based at least in part on the security level associated with said mobile device; and returning the set of applications in response to the request. responsive to a request to a mobile device management system for one or more applications available for installation on a mobile device, accessing by the mobile device management system a user profile associated with the request and a mobile device profile associated with the mobile device, wherein the user profile includes an enterprise organizational information of a user associated with the request; filtering, by the mobile device management system, a catalog of applications based on a set of policies applied to the user profile and mobile device profile to select a set of applications, said filtering being based at least in part on a security level associated with said mobile device and said set of applications including one or more applications included in the set based at least in part on the security level associated with said mobile device; and returning the set of applications in response to the request.