A method, comprising: receiving, by a mobile computing device , a single sign-on (SSO) credential that is associated with at least one user account; monitoring , via a mobile device management agent on the mobile computing device, state information associated with the mobile computing device; and enforcing at least one mobile device management policy based on the monitored state information and the SSO credential, wherein monitoring the state information includes providing the SSO credential and at least some of the monitored state information to one or more policy management servers, wherein enforcing the at least one mobile device management policy includes: receiving management information from the one or more policy management servers; and executing at least one command included in the management information, wherein the at least one command included in the management information is generated, for execution on the mobile computing device, by the one or more policy management servers based on the SSO credential and the at least some of the monitored state information received from the mobile device management agent on the mobile computing device, and wherein enforcing the at least one mobile device management policy further includes: receiving enterprise data from one or more enterprise resources; storing the received enterprise data in a secure document container on the mobile computing device; and based on detecting a change in device state, selectively wiping the enterprise data stored in the secure document container. receiving, by a mobile computing device , a single sign-on (SSO) credential that is associated with at least one user account; monitoring , via a mobile device management agent on the mobile computing device, state information associated with the mobile computing device; and enforcing at least one mobile device management policy based on the monitored state information and the SSO credential, wherein monitoring the state information includes providing the SSO credential and at least some of the monitored state information to one or more policy management servers, wherein enforcing the at least one mobile device management policy includes: receiving management information from the one or more policy management servers; and executing at least one command included in the management information, receiving management information from the one or more policy management servers; and executing at least one command included in the management information, wherein the at least one command included in the management information is generated, for execution on the mobile computing device, by the one or more policy management servers based on the SSO credential and the at least some of the monitored state information received from the mobile device management agent on the mobile computing device, and wherein enforcing the at least one mobile device management policy further includes: receiving enterprise data from one or more enterprise resources; storing the received enterprise data in a secure document container on the mobile computing device; and based on detecting a change in device state, selectively wiping the enterprise data stored in the secure document container. receiving enterprise data from one or more enterprise resources; storing the received enterprise data in a secure document container on the mobile computing device; and based on detecting a change in device state, selectively wiping the enterprise data stored in the secure document container. <EOS>