Mobile Device Enrollment Methods

Enrollment is the process of adding iOS, iPadOS, and tvOS devices to Jamf Pro. Enrolling devices allows you to perform inventory, configuration, security management, and distribution tasks on the devices. When enrolled, inventory information for the devices is submitted to Jamf Pro.

The following explains the different types of enrollment methods:

  • Automated Device Enrollment—Automated Device Enrollment allows organizations to configure and manage devices from the moment the devices are removed from the box (known as zero-touch deployment). These devices become supervised, and the MDM profile cannot be removed by the user. Automated Device Enrollment is designed for devices owned by the organization. For more information, see Automated Device Enrollment into MDM in Apple's Deployment Reference for iPhone and iPad.

  • Device Enrollment—Device Enrollment allows organizations to manually enroll institutionally owned devices and manage many different aspects of device use, including the ability to erase the device. If a user removes the MDM profile, all settings and apps that are being managed by the MDM solution are removed. For more information, see Device Enrollment into MDM in Apple's Deployment Reference for iPhone and iPad.

  • Personally Owned Device Enrollment—Personally owned device enrollment is designed for BYOD—or Bring Your Own Device deployments—where the user, not the organization, owns the device. User Enrollment also requires Managed Apple IDs. For more information, see User Enrollment into MDM in Apple's Deployment Reference for iPhone and iPad.

Automated Device Enrollment for Mobile Devices

The only method you can use to enroll devices with Automated Device Enrollment and Jamf Pro is a PreStage enrollment. PreStage enrollments are a recommended method of enrollment. You can use a PreStage enrollment to configure basic device settings and customize the Setup Assistant experience. You can also use Apple Configurator 2 and a PreStage enrollment to enroll devices with Jamf Pro, supervise them, and configure device setup. For more information, see Mobile Device PreStage Enrollments.

Note: This enrollment method requires an Apple School Manager or Apple Business Manager account. For more information, see Integrating with Automated Device Enrollment.

Device Enrollment for Mobile Devices

There are several methods you can use to enroll mobile devices with Device Enrollment and Jamf Pro:

  • (Recommended) User-initiated enrollmentYou can use the User-Initiated Enrollment settings to customize the enrollment experience for users, including the messaging that displays for each step of the enrollment process. Users can then enroll their own devices by logging in to a web-based enrollment portal and following the onscreen instructions. You can provide this URL by sending it in an email or SMS invitation from Jamf Pro, or through any other means that fit your environment. User-initiated enrollment is the only method that can be used to enroll personally owned devices using Device Enrollment.

  • Use an enrollment profileYou can create an enrollment profile using Jamf Pro and install it on devices by connecting them to a computer via USB. This enrollment method requires Apple Configurator 2.

  • Use Apple Configurator enrollmentYou can enroll devices with Jamf Pro by connecting them to a computer via USB and using an enrollment URL with Apple Configurator 2.

Personally Owned Device Enrollment for Mobile Devices

You can allow users to enroll their personally owned iOS and iPadOS devices with Jamf Pro via user-initiated enrollment using the following methods:

  • Account-Driven User Enrollment—You can use the User-Initiated Enrollment settings to enable Account-Driven User Enrollment. When a user authenticates to their device with a Managed Apple ID, the enrollment process initializes. Users are redirected to the enrollment portal and prompted to install the MDM profile on their device. For more information, see Account-Driven User Enrollment for Personally Owned Mobile Devices.

  • User Enrollment—You can use the User-Initiated Enrollment settings to customize the enrollment experience for users, including the messaging that displays for each step of the enrollment process. Users can then enroll their own devices by logging in to a web-based enrollment portal and following the onscreen instructions. You can provide this URL by sending it in an email or SMS invitation from Jamf Pro, or through any other means that fit your environment. For more information, see User Enrollment for Personally Owned Mobile Devices.

For more information about enrolling personally owned mobile devices in your environment, see the Building a BYOD Program with User Enrollment and Jamf Pro technical paper.

Related Information

For related information, see the following section in this guide:

Components Installed on Mobile Devices
Learn about the components installed on mobile devices during enrollment.

For related information, see the following technical papers:

Deploying iOS and tvOS Devices Using Apple Configurator 2 and Jamf Pro
Get step-by-step instructions on how to deploy iOS devices using Apple Configurator 2.

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2021 Jamf. All rights reserved.