Patent ID: 8914842

Claim:
A computer-implemented method of providing data access to business data of a business, comprising: receiving a data request including a signed token containing at least one claim from a given mobile device; validating a signature of the token; validating the at least one claim; sending the data request and user information to an enterprise resource planning (ERP) business data system that automates business activity related to management across an organization, that includes the business data; and providing role-based access to a plurality of mobile devices, comprising pushing different business data to different ones of the plurality of mobile devices based on different roles associated with the mobile devices, wherein providing role-based access comprise: after the given mobile device is validated in the business data system, providing the given mobile device with role-based access to the business data, including entities that represent business data records in the business data system, the role-based access being based on a role corresponding to the at least one claim and based on role-based access policies of the business data system; and wherein the at least one claim allows access to features of an application executing on the given mobile device.