User-Initiated Enrollment Experience

The following steps outline the user experience for enrolling a personally owned iOS device:

1. Log in.
When users access the enrollment portal from their device, they must log in by entering credentials for an LDAP directory account or a Jamf Pro user account with user-initiated enrollment privileges.

2. Specify the device ownership type (if applicable).
If both institutionally owned device enrollment and personally owned device enrollment are enabled in Jamf Pro, the user must select the personal device ownership option. When this option is selected, the user can view the personal device management description that has been entered on the Messaging pane Device Ownership tab in the User-Initiated Enrollment settings. This description represents the IT management capabilities for a personal device.

3. Accept the End User License Agreement (if applicable).
If an End User License Agreement (EULA) has been entered on the Messaging pane EULA tab in the User-Initiated Enrollment settings, the user must accept the EULA terms to continue with enrollment.

4. Choose a site (if applicable).
If the user is a member of multiple LDAP user groups and site access has been configured separately for those groups on the Access pane in the User-Initiated Enrollment settings, the user must select the site to use to enroll their personal device. If a profile description was entered on the Messaging pane when creating the personal device profile assigned to the selected site, that profile description is displayed.

5. Install the CA certificate (if applicable).
The user must tap through a series of screens to install the CA certificate.
Note: This step is skipped if the Skip certificate installation during enrollment checkbox is selected on the General pane in the User-Initiated Enrollment settings and the user’s environment has an SSL certificate that was obtained from an internal CA or a trusted third-party vendor.

6. Install the MDM profile.
The user must tap through a series of screens to install the MDM profile. On the first screen in the series, the user can tap the Information icon to view the personal device management description that has been entered on the Messaging pane Device Ownership tab in the User-Initiated Enrollment settings. This description represents the IT management capabilities for a personal device.

Enrollment is complete.
When notified that enrollment is complete, the device is enrolled with Jamf Pro.