Enabling User Enrollment for Mobile Devices in Jamf Pro

User Enrollment for personally-owned mobile devices is enabled via Jamf Pro's User-Initiated Enrollment settings. You can enable Profile-Driven User Enrollment, Account-Driven User Enrollment, or both.

  1. In Jamf Pro, click Settings in the top-right corner of the page.
  2. In the Global Management section, click User-Initiated Enrollment .
  3. Click Edit .
  4. Click the iOS tab.
  5. Select the Enable for personally owned devices checkbox in one or both sections to enable the enable Profile-Driven User Enrollment, Account-Driven User Enrollment, or both.
  6. (Optional) Click the Access tab and configure whether an LDAP group has access to enroll mobile devices using an enrollment URL without an invitation.

    When sites are defined in Jamf Pro, you can choose a site to display to LDAP user groups during enrollment.

  7. Click Save .
User Enrollment is enabled for enrollment with Jamf Pro for the selected methods.

You can now do the following:

  • To begin using Profile-Driven User Enrollment, provide an enrollment URL or invitation to users.

  • To continue setting up Account-Driven User Enrollment, you must create and host a JSON file on a web server that is accessible to devices you want to enroll with this method. This allows devices to contact Jamf Pro and download the MDM profile after authentication in the Settings app. For more information, see Setting up Account-Driven User Enrollment