User-Initiated Enrollment for Mobile Devices

You can allow users to enroll mobile devices by having them log in to an enrollment portal where they are prompted to install the necessary profile and certificates.

To direct users to the enrollment portal, you need to provide them with the enrollment URL. The enrollment URL is the full URL for the JAMF Software Server (JSS) followed by “/enroll”. For example:

https://jss.mycompany.com:8443/enroll

You can provide the enrollment URL to users by doing the following:

  • Provide the URL in the way that best fits your environment
    Simply provide the URL to users in the way that best fits your needs. You can add a mobile device to a site when using this method.

  • Send an enrollment invitation to users via email or SMS
    This allows you create an email or SMS invitation in the JSS and send it to one or more users. It gives you more control over user access to the enrollment portal by allowing you do the following:

    • Set an expiration date for the invitation

    • Require users to log in to the portal

    • Allow multiple uses of the invitation

    • Add the mobile device to a site during enrollment

    • View the status of the invitation

    Note: Mobile device enrollment invitations cannot be sent to personally owned devices. You must provide the enrollment URL to those users by some other means.

Users can log in to the enrollment portal using an LDAP directory account or a JSS user account. When a user logs in with an LDAP directory account, user and location information is submitted to the JSS during enrollment. When a user logs in with a JSS user account, it allows an LDAP user to be assigned to the mobile device.

Requirements

To allow mobile devices to be enrolled with user-initiated enrollment, you need:

To send a mobile device enrollment invitation via email or SMS, you need an SMTP server set up in the JSS. (For more information, see Integrating with an SMTP Server.)

For users to log in to the enrollment portal with an LDAP directory account, you need an LDAP server set up in the JSS. (For more information, see Integrating with LDAP Directory Services.)

Sending a Mobile Device Enrollment Invitation

You can send an email or SMS invitation that contains the enrollment URL from the JSS. Users click the enrollment URL in the email or SMS message to access the enrollment portal.

Before you configure the invitation, make sure you have the email addresses or phone numbers of the users you want to send the invitation to.

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Click Enrollment Invitations.
    On a smartphone or iPod touch, this option is in the pop-up menu.

  4. Click New images/download/thumbnails/12323218/New_icon.png .

  5. Follow the onscreen instructions to send the enrollment invitation.

An enrollment invitation is immediately sent to the email addresses or phone numbers you specified.

You can view the status of the enrollment invitation in the list of invitations.

Viewing Mobile Device Enrollment Invitation Usage

You can view a list of mobile devices that were enrolled with a specific enrollment invitation.

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Click Enrollment Invitations.
    On a smartphone or iPod touch, this option is in the pop-up menu.

  4. Click the enrollment invitation you want to view usage for.

  5. Click View Enrolled Mobile Devices.

A list of mobile devices enrolled with the invitation is displayed.

Deleting a Mobile Device Enrollment Invitation

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Click Enrollment Invitations.
    On a smartphone or iPod touch, this option is in the pop-up menu.

  4. Click the enrollment invitation you want to delete.

  5. Click Delete, and then click Delete again to confirm.

Related Information

For related information, see the following sections in this guide:

Copyright | Privacy | Terms of Use | Security
Copyright JAMF Software, LLC 2016