Configuring the User-Initiated Enrollment Settings

1. Log in to the JSS with a web browser.

2. In the top-right corner of the page, click Settings .

3. Click Global Management.
   On a smartphone or iPod touch, this option is in the pop-up menu.

4. Click User-Initiated Enrollment .

5. Click Edit.

6. Use the General pane to restrict re-enrollment and to skip certificate installation.

7. On the Messaging pane, do the following to customize the text displayed during the enrollment experience and add languages:

   1. Do one of the following:

      • To add a language, click Add and then choose the language from the Language pop-up menu.
        Note: English is the default language if the mobile device does not have a preferred language set on it.

      • To customize the text for a language already listed, click Edit next to the language.

   2. In the Page Title for Enrollment field, enter a page title to display at the top of all enrollment pages.

   3. On the Login tab, use the fields provided to customize how you want the Login page to be displayed to users.

      

   4. Click the Device Ownership tab and use the fields provided to customize the text that is displayed to users based on their device ownership type. The text displayed and the enrollment page that the text displays on depends on the enrollment options that you enable:

      • If you enable user-initiated enrollment for both institutionally owned and personally owned iOS devices—Customize the text that prompts users to choose the appropriate device ownership type, and customize the device management description that explains the IT management capabilities for each device ownership type. When users select the personal or institutional device ownership type, the respective device management description is displayed.

      • If you enable user-initiated enrollment for personally owned devices only—Customize the device management description that explains the IT management capabilities for personal device ownership. This description is accessible to users by tapping the Information icon displayed on the Personal MDM Profile page during enrollment.

      (For instructions on enabling user-initiated enrollment for the iOS and Android platforms, see step 8 later in this procedure.)

      

   5. Click the EULA tab and use the fields provided to specify an End User License Agreement (EULA) for personally owned devices. If the EULA fields are left blank, a EULA page is not displayed to users during enrollment.
      Note: The EULA page is not displayed for users logging in with a JSS user account.
      

   6. Click the Sites tab and customize the message that prompts users to choose a site.

      

   7. (iOS only) Click the Certificate tab and use the fields provided to customize the message that prompts users to install the CA certificate for mobile devices to trust at enrollment.
      

   8. Click the Personal MDM Profile tab and use the fields provided to customize the message that prompts users to install the MDM profile for personally owned devices.
      You can also specify the MDM profile name and description to display during enrollment.
      Note: The MDM profile installation text and MDM profile name are not displayed during enrollment of an Android device.

      

   9. (Android only) Click the App for Android tab and use the fields provided to customize the message that prompts users to install Self Service Mobile for Android from Google Play.
      

   10. (iOS only) Click the Complete tab and use the fields provided to customize the messages that are displayed to users if enrollment is successful or if it fails.

       

   11. Click Done.

8. On the Platforms pane, do the following to enable user-initiated enrollment for each mobile device platform as needed:

   1. To enable enrollment for personally owned iOS devices, click the iOS tab and then select the Enable user-initiated enrollment for personally owned iOS devices checkbox.

   2. To enable enrollment for personally owned Android devices, click the Android tab and then select the Enable user-initiated enrollment for personally owned Android devices checkbox.

9. On the Access pane, do the following to configure enrollment access for all LDAP users and/or specific LDAP groups:

   1. Do one of the following:

      • To configure enrollment access for a specific LDAP user group, click Add and then search for the group.

      • To configure enrollment access for a group already listed, click Edit next to the group.

   2. To allow the group to enroll personally owned devices, select the Allow group to enroll personally owned devices checkbox.

   3. (Optional) If there are one or more sites in the JSS, choose the site you want to allow the LDAP user group to select during enrollment.
      If an LDAP user belongs to more than one LDAP user group in the JSS, the user will have the option to choose a site from a pop-up menu of sites assigned to each of those groups.

   4. Click Done.

10. Click Save.