Mobile Device Enrollment Methods

Enrollment is the process of adding iOS, iPadOS, and tvOS devices to Jamf Pro. Enrolling devices allows you to perform inventory, configuration, security management, and distribution tasks on the devices. When enrolled, inventory information for the devices is submitted to Jamf Pro.

The following explains the different types of enrollment methods:

  • Automated Device Enrollment—Automated Device Enrollment allows organizations to configure and manage devices from the moment the devices are removed from the box (known as zero-touch deployment). These devices become supervised, and the MDM profile cannot be removed by the user. Automated Device Enrollment is designed for devices owned by the organization. For more information, see Automated Device Enrollment into MDM in Apple's Deployment Reference for iPhone and iPad.

  • Device Enrollment—Device Enrollment allows organizations to manually enroll institutionally owned devices and manage many different aspects of device use, including the ability to erase the device. If a user removes the MDM profile, all settings and apps that are being managed by the MDM solution are removed. For more information, see Device Enrollment into MDM in Apple's Deployment Reference for iPhone and iPad.

  • User Enrollment—User Enrollment is designed for BYOD—or Bring Your Own Device deployments—where the user, not the organization, owns the device. User Enrollment also requires Managed Apple IDs. For more information, see User Enrollment into MDM in Apple's Deployment Reference for iPhone and iPad.

Automated Device Enrollment for Mobile Devices

The only method you can use to enroll devices with Automated Device Enrollment and Jamf Pro is a PreStage enrollment. PreStage enrollments are a recommended method of enrollment. You can use a PreStage enrollment to configure basic device settings and customize the Setup Assistant experience. This reduces the amount of time and interaction it takes to enroll devices and prepare them for use. You can also use Apple Configurator 2 and a PreStage enrollment to enroll devices with Jamf Pro, supervise them, and configure device setup. For more information, see Mobile Device PreStage Enrollments.

Note: This enrollment method requires an Apple School Manager or Apple Business Manager account. For more information, see Integrating with Automated Device Enrollment.

Device Enrollment for Mobile Devices

There are several methods you can use to enroll mobile devices with Device Enrollment and Jamf Pro:

  • (Recommended) User-initiated enrollmentYou can use the User-Initiated Enrollment settings to customize the enrollment experience for users, including the messaging that displays for each step of the enrollment process. Users can then enroll their own devices by logging in to a web-based enrollment portal and following the onscreen instructions. You can provide this URL by sending it in an email or SMS invitation from Jamf Pro, or through any other means that fit your environment. User-initiated enrollment is the only method that can be used to enroll personally owned devices using Device Enrollment.

  • Use an enrollment profileYou can create an enrollment profile using Jamf Pro and install it on devices by connecting them to a computer via USB. This enrollment method requires Apple Configurator 2.

  • Use Apple Configurator enrollmentYou can enroll devices with Jamf Pro by connecting them to a computer via USB and using an enrollment URL with Apple Configurator 2.

User Enrollment for Mobile Devices

The only method you can use to enroll iOS and iPadOS devices with User Enrollment and Jamf Pro is user-initiated enrollment. You can use the User-Initiated Enrollment settings to customize the enrollment experience for users, including the messaging that displays for each step of the enrollment process. Users can then enroll their own devices by logging in to a web-based enrollment portal and following the onscreen instructions. You can provide this URL by sending it in an email or SMS invitation from Jamf Pro, or through any other means that fit your environment. User-initiated enrollment is the only method that can be used to enroll personally owned devices using User Enrollment. For more information, see User Enrollment for Mobile Devices and the Building a BYOD Program with User Enrollment and Jamf Pro technical paper.

Related Information

For related information, see the following section in this guide:

Components Installed on Mobile Devices
Learn about the components installed on mobile devices during enrollment.

For related information, see the following technical papers:

Deploying iOS and tvOS Devices Using Apple Configurator 2 and Jamf Pro
Get step-by-step instructions on how to deploy iOS devices using Apple Configurator 2.

Building a BYOD Program with User Enrollment and Jamf Pro
Get step-by-step instructions on how to enroll personally owned mobile devices using User Enrollment.

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2020 Jamf. All rights reserved.