White Papers
Abstract
This document highlights an end-to-end workflow that could be used to set up Android devices in MaaS360 as Corporate Shared without having to input credentials.
Content
Use the Android Enterprise QR enrollment workflows to generate a userless enrollment request. The option will only appear if device ownership is set as "Corporate Shared." It is recommended that admins choose the "Device Account" option for the Google Play account. This will make a unique account for each device, rather than being dependent on user assignment.
Scanning the QR code on a factory reset device will start the enrollment process. While this method does bypass the need to manually enter credentials for MaaS360 authentication, and drastically reduces the number of screen taps required to enroll, it is not possible to get truly zero interaction. The admin will have to follow the onscreen prompts to complete device enrollment. The exact screens shown tend to vary from one OEM to another, but the final result will always be landing on the home screen with the device enrolled.
When the process is complete, users can launch the MaaS360 agent, and sign in to their account. Once a user has completed their work, they can sign out, and the device will revert to a user-less state. Admins can apply different policies based on whether or not a user is signed it, locking down features and functionality while there is no user assigned.
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSXX","label":"IBM MaaS360"},"ARM Category":[{"code":"a8m0z000000070xAAA","label":"ENROLLMENTS"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
11 January 2022
UID
ibm16540200