There are two methods for enrolling devices into Jamf Now: Auto-Enrollment and Open Enrollment.
Auto-Enrollment is great for company-owned devices and allows for new devices to enroll as they go
through Setup Assistant, but what if we want to enroll a device that has already been set up?
What if an employee already owns a device and would like to also use it for work?
For this, we can use Open Enrollment, a method to bring any device into Jamf
Now for management without requiring the user to perform a wipe or reset.
This is Zach, welcome to Open Enrollment with Jamf Now!
Open Enrollment allows us to enroll existing devices into Jamf Now
by having the user follow a web link connected to your Jamf Now instance.
The link will download a management profile to their device, the profile
is then installed on the device, and then the device will appear in Jamf Now.
There are a few differences between Auto-Enrolled and Open Enrolled devices to be mindful of,
the most important of which is Supervision. Supervision is a security status defined by
Apple that allows management solutions like Jamf Now increased control over a device.
Auto-Enrolled devices are supervised by default, whereas Open Enrolling
a device will not enable supervision. Many settings and actions in Jamf Now
require supervision in order to take effect on a device. Look for the "Supervision Required"
note under each setting to see what can and can not be applied to an unsupervised device.
Let's log in to Jamf Now and set up Open Enrollment!
Click Open Enrollment on the sidebar. Open Enrollment will be turned off by default,
and can be enabled by selecting the checkbox at the top of the page.
With the box checked, we have a few options to configure for Open Enrollment. The Passcode
field allows you to secure your Open Enrollment link with a 4-digit passcode, and is required to
activate Open Enrollment. I'll set a passcode now. Beneath this, we can specify a Duration for how
long Open Enrollment is enabled. By default, Until Disabled is selected, meaning the Open Enrollment
link will remain active until you return to this page and deselect the checkbox at the top.
Alternatively, we can set a specific duration from the dropdown menu,
after which Open Enrollment will automatically disable. I'll set a one-day duration here.
Finally, we see your unique Open Enrollment link at the bottom of the page.
This is the link that users will follow on their device to enroll it to Jamf Now.
You are unable to change your Open Enrollment URL, so make sure to enable and disable Open
Enrollment as necessary once the link has been distributed to your future enrollees.
With those settings configured, we can click Save Changes to activate Open Enrollment in Jamf Now!
Let's take a device through Open Enrollment. Open Enrollment only works in the Safari
web browser on iOS devices, so I'll open the app and navigate to my Open Enrollment link.
Here we are prompted for a few items, starting with the Open
Enrollment Passcode we set previously. We can then select a Blueprint for the
device-- for more information on Blueprints, please see our module Blueprints with Jamf Now.
Finally, we have the option to enter the user's name for this device.
This name will appear on the device's inventory page in Jamf Now once the device has enrolled.
I'll click Start Enrollment, and choose to allow the download from Jamf Now. We see a
prompt that the profile has downloaded and can be installed from Settings, let's head there now.
Navigate to Settings and select Profile Downloaded.
Click Install at the top right, and approve the Trust prompt that appears as the profile installs.
The profile will install, and we can select Done in the top right.
If we head back to Jamf Now and select Devices in the sidebar,
I can now see this device has enrolled. Click the device card
to bring up inventory information about the device, such as the assigned user,
OS version, supervision status, and more. That's it for Open Enrollment with Jamf Now!
Open Enrollment is a great solution for employees looking to bring personal devices
under management or to quickly enroll devices that are not company-owned.
Keep in mind that Open Enrolled devices will not be Supervised as part of the process,
and ensure that the settings you want applied to the device do not require supervision.
If you run into issues with Open Enrollment, please reach out to Jamf Support for assistance.
Thanks for watching!